SEARCH · Search NASA

Results for “Assurance Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

All sources NASA NTRS DOE OSTI

NASA NTRS2010

Obtaining Valid Safety Data for Software Safety Measurement and Process Improvement

We report on a preliminary case study to examine software safety risk in the early design phase of the NASA Constellation spaceflight program. Our goal is to provide NASA quality assurance managers with information regarding the ongoing state of software safety across the program. We examined 154 hazard reports created during the preliminary design phase of three major flight hardware systems within the Constellation program. Our purpose was two-fold: 1) to quantify the relative importance of software with respect to system safety; and 2) to identify potential risks due to incorrect application of the safety process, deficiencies in the safety process, or the lack of a defined process. One early outcome of this work was to show that there are structural deficiencies in collecting valid safety data that make software safety different from hardware safety. In our conclusions we present some of these deficiencies.

Basili, Victor r.↗

NASA NTRS1998

Case-Based Capture and Reuse of Aerospace Design Rationale

The goal of this project is to apply artificial intelligence techniques to facilitate capture and reuse of aerospace design rationale. The project applies case-based reasoning (CBR) and concept mapping (CMAP) tools to the task of capturing, organizing, and interactively accessing experiences or "cases" encapsulating the methods and rationale underlying expert aerospace design. As stipulated in the award, Indiana University and Ames personnel are collaborating on performance of research and determining the direction of research, to assure that the project focuses on high-value tasks. In the first five months of the project, we have made two visits to Ames Research Center to consult with our NASA collaborators, to learn about the advanced aerospace design tools being developed there, and to identify specific needs for intelligent design support. These meetings identified a number of task areas for applying CBR and concept mapping technology. We jointly selected a first task area to focus on: Acquiring the convergence criteria that experts use to guide the selection of useful data from a set of numerical simulations of high-lift systems. During the first funding period, we developed two software systems. First, we have adapted a CBR system developed at Indiana University into a prototype case-based reasoning shell to capture and retrieve information about design experiences, with the sample task of capturing and reusing experts' intuitive criteria for determining convergence (work conducted at Indiana University). Second, we have also adapted and refined existing concept mapping tools that will be used to clarify and capture the rationale underlying those experiences, to facilitate understanding of the expert's reasoning and guide future reuse of captured information (work conducted at the University of West Florida). The tools we have developed are designed to be the basis for a general framework for facilitating tasks within systems developed by the Advanced Design Technologies Testbed (ADTT) project at ARC. The tenets of our framework are (1) that the systems developed should leverage a designer's knowledge, rather than attempting to replace it; (2) that learning and user feedback must play a central role, so that the system can adapt to how it is used, and (3) that the learning and feedback processes must be as natural and as unobtrusive as possible. In the second funding period we will extend our current work, applying the tools to capturing higher-level design rationale.

Leake, David B.↗

DOE OSTI2020

Dragonstone Strategy – State of Cybersecurity in the Oil & Natural Gas Sector

The oil & natural gas (ONG) system touches every corner of the nation and increased communications & control capabilities have not only allowed for greater efficiency of system operation, but have also created a massive target for adversaries to launch cyber-attacks. Like any other heavy industrial process, the ONG system relies on a complex system of information technology (IT) and operational technology (OT) devices. The current state of cyber-preparedness across the ONG industry varies from organization to organization. Among the most common challenges that ONG companies face are remote locations, longlived field assets, and lacking capabilities to find and track malware on their systems. ONG companies tend to be concerned with lack of cyber-awareness from employees, risk stemming from remote access for operations & maintenance, and software vulnerabilities within third-party equipment. Various industry and government organizations are performing research and development activities to address some of these challenges, but in many cases industry stakeholders are not aware of solutions that already exist. It is clear that a need exists for a coherent, comprehensive, multi-layered strategy for assuring the security and resilience of the nation's pipeline infrastructure against cyber threats. For a variety of reasons, the general consensus from stakeholders interviewed by LLNL is that the state of cyber-security within the electric grid is currently outpacing its ONG cousin. Existing strategies for the resilience and cyber-security of the electric grid can and should be leveraged to provide immediate benefits to the ONG system. In LLNL’s view, there are two key factors currently limiting the development of necessary cyber-practices within the ONG industry: The sheer number of differing regulatory bodies and trade groups offering both standards and best-practice recommendations for ONG cyber-security makes it difficult to create a comprehensive, directed, and coherent strategy that is applicable to all players within the ONG industry. The ONG industry is unaware of potentially useful technologies that have been developed for ensuring cyber-security of other infrastructure systems, such as the electric grid. Leveraging these technologies—and the science and engineering behind them—can provide some low-hanging fruit that can greatly improve cyber-security in the ONG industry without significant investments in terms of time and money. In the months following this report, LLNL will continue to perform outreach to key oil & gas industry stakeholders in a continual effort to identify the most pressing cyber-resilience issues in the industry. This outreach will be supplemented with LLNL’s threat intelligence capabilities to begin painting a clearer picture of the overall threat landscape faced by this sector. This assessment will be threat-informed and while the strategy itself will not be classified we will leverage intelligence analysis and adversary capabilities to identify gaps in current cybersecurity practices for oil & gas pipeline systems. Recommended efforts will be compiled into a cyber-resilience roadmap for the oil & gas pipeline sector, in which LLNL will highlight priority activities to immediately improve the state of cyber-resilience in the industry.

02 PETROLEUM↗

NASA NTRS2004

Comparing NASA and ESA Cost Estimating Methods for Human Missions to Mars

To compare working methodologies between the cost engineering functions in NASA Marshall Space Flight Center (MSFC) and ESA European Space Research and Technology Centre (ESTEC), as well as to set-up cost engineering capabilities for future manned Mars projects and other studies which involve similar subsystem technologies in MSFC and ESTEC, a demonstration cost estimate exercise was organized. This exercise was a direct way of enhancing not only cooperation between agencies but also both agencies commitment to credible cost analyses. Cost engineers in MSFC and ESTEC independently prepared life-cycle cost estimates for a reference human Mars project and subsequently compared the results and estimate methods in detail. As a non-sensitive, public domain reference case for human Mars projects, the Mars Direct concept was chosen. In this paper the results of the exercise are shown; the differences and similarities in estimate methodologies, philosophies, and databases between MSFC and ESTEC, as well as the estimate results for the Mars Direct concept. The most significant differences are explained and possible estimate improvements identified. In addition, the Mars Direct plan and the extensive cost breakdown structure jointly set-up by MSFC and ESTEC for this concept are presented. It was found that NASA applied estimate models mainly based on historic Apollo and Space Shuttle cost data, taking into account the changes in technology since then. ESA used models mostly based on European satellite and launcher cost data, taking into account the higher equipment and testing standards for human space flight. Most of NASA's and ESA s estimates for the Mars Direct case are comparable, but there are some important, consistent differences in the estimates for: 1) Large Structures and Thermal Control subsystems; 2) System Level Management, Engineering, Product Assurance and Assembly, Integration and Test/Verification activities; 3) Mission Control; 4) Space Agency Program Level activities.

Hunt, Charles D.↗

DOE OSTI2023

Expansion of the Verified, Archived, Library of Inputs and Data (VALID) [Slides]

This project dialogue provides an update on the Expansion of Verified, Archived, Library of Inputs and Data or VALID. VALID is a QA-Like (Quality Assurance) process to generate high quality models from reliable reference descriptions and make those models available to users. This presentation provides a brief project overview, a reminder of cases added in FY2021, cases currently in progress, and future plans for VALID.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

NASA NTRS2006

Emerging technologies for V&V of ISHM software for space exploration

Systems1,2 required to exhibit high operational reliability often rely on some form of fault protection to recognize and respond to faults, preventing faults' escalation to catastrophic failures. Integrated System Health Management (ISHM) extends the functionality of fault protection to both scale to more complex systems (and systems of systems), and to maintain capability rather than just avert catastrophe. Forms of ISHM have been utilized to good effect in the maintenance phase of systems' total lifecycles (often referred to as 'condition-based mainte-nance'), but less so in a 'fault protection' role during actual operations. One of the impediments to such use lies in the challenges of verification, validation and certification of ISHM systems themselves. This paper makes the case that state-of-the-practice V&V and certification techniques will not suffice for emerging forms of ISHM systems; however, a number of maturing software engineering assurance technologies show particular promise for addressing these ISHM V&V challenges.

fault detection, isolation, and recovery↗

NASA NTRS2016

Model Based Mission Assurance: NASA's Assurance Future

Model Based Systems Engineering (MBSE) is seeing increased application in planning and design of NASA’s missions. This suggests the question: what will be the corresponding practice of Model Based Mission Assurance (MBMA)? Contemporaneously, NASA’s Office of Safety and Mission Assurance (OSMA) is evaluating a new objectives based approach to standards to ensure that the Safety and Mission Assurance disciplines and programs are addressing the challenges of NASA’s changing missions, acquisition and engineering practices, and technology. MBSE is a prominent example of a changing engineering practice. We use NASA’s objectives-based strategy for Reliability and Maintainability as a means to examine how MBSE will affect assurance. We surveyed MBSE literature to look specifically for these affects, and find a variety of them discussed (some are anticipated, some are reported from applications to date). Predominantly these apply to the early stages of design, although there are also extrapolations of how MBSE practices will have benefits for testing phases. As the effort to develop MBMA continues, it will need to clearly and unambiguously establish the roles of uncertainty and risk in the system model. This will enable a variety of uncertainty-based analyses to be performed much more rapidly than ever before and has the promise to increase the integration of CRM (Continuous Risk Management) and PRA (Probabilistic Risk Analyses) even more fully into the project development life cycle. Various views and viewpoints will be required for assurance disciplines, and an over-arching viewpoint will then be able to more completely characterize the state of the project/program as well as (possibly) enabling the safety case approach for overall risk awareness and communication.

Evans, John↗

NASA NTRSDate not supplied

Runway Sign Classifier: A DAL C Certifiable Machine Learning System

In recent years, the remarkable progress of Machine Learning (ML) technologies within the domain of Artificial Intelligence (AI) systems has presented unprecedented opportunities for the aviation industry, paving the way for further advancements in automation, including the potential for single pilot or fully autonomous operation of large commercial airplanes. However, ML technology faces major incompatibilities with existing airborne certification standards, such as ML model traceability and explainability issues or the inadequacy of traditional coverage metrics. Certification of ML-based airborne systems using current standards is problematic due to these challenges. This paper presents a case study of an airborne system utilizing a Deep Neural Network (DNN) for airport sign detection and classification. Building upon our previous work, which demonstrates compliance with Design Assurance Level (DAL) ”D”, we upgrade the system to meet the more stringent requirements of Design Assurance Level ”C”. To achieve DAL C, we employ an established architectural mitigation technique involving two redundant and dissimilar Deep Neural Networks. The application of novel ML-specific data management techniques further enhances this approach. This work is intended to illustrate how the certification challenges of ML-based systems can be addressed for medium criticality airborne applications.

Flight Software↗

NASA NTRS2011

NASA's Human Rating Requirements - A Historical Interpretive Perspective

Section 3.0 of NASA's Human Rating Requirements for Space Systems, NPR 8705.2, represents technical engineering requirements that the Agenc y requires of Human Space Systems. In many cases the requirements are not unlike requirements for any space system, crewed or uncrewed, th ey deal with successfully accomplishing the mission objectives. Howev er, they go one step further and have requirements that go beyond suc cessful completion of the mission and dictate functions or actions ne cessary to assure the survival of the crew. In that regard they are u nique from other space system requirements. Even with their uniquenes s the technical requirements of the NPR 8705.2 have been relatively u nchanged in overall intent over the revisions. They all have provided for system redundancy, crew habitable environment, crew situational awareness, crew operation, system control, emergency egress and abort systems. In a few cases the intent of the requirement was changed in tentionally, either to restrict certain types of systems or their fun ctions, or to encompass lessons learned from previous programs. For t he most part the requirements are non controversial and represent the current best practices for human space systems, however, a few requi rements are always debated and have evolved over revisions of the NPR due to studies conducted with various programs like the Orbital Spac e Plane and the Constellation Programs. Those requirements will be di scussed using results of trade studies conducted during past programs highlighting how these particular requirements have evolved through the revisions of the NPR. Comments will also be provided for requirem ents that although not debated, have provided challenges in interpret ation.

Langford, Gerald↗

NASA NTRS1990

Project EGRESS: Earthbound Guaranteed Reentry from Space Station. the Design of an Assured Crew Recovery Vehicle for the Space Station

Unlike previously designed space-based working environments, the shuttle orbiter servicing the space station will not remain docked the entire time the station is occupied. While an Apollo capsule was permanently available on Skylab, plans for Space Station Freedom call for a shuttle orbiter to be docked at the space station for no more than two weeks four times each year. Consideration of crew safety inspired the design of an Assured Crew Recovery Vehicle (ACRV). A conceptual design of an ACRV was developed. The system allows the escape of one or more crew members from Space Station Freedom in case of emergency. The design of the vehicle addresses propulsion, orbital operations, reentry, landing and recovery, power and communication, and life support. In light of recent modifications in space station design, Project EGRESS (Earthbound Guaranteed ReEntry from Space Station) pays particular attention to its impact on space station operations, interfaces and docking facilities, and maintenance needs. A water-landing medium-lift vehicle was found to best satisfy project goals of simplicity and cost efficiency without sacrificing safety and reliability requirements. One or more seriously injured crew members could be returned to an earth-based health facility with minimal pilot involvement. Since the craft is capable of returning up to five crew members, two such permanently docked vehicles would allow a full evacuation of the space station. The craft could be constructed entirely with available 1990 technology, and launched aboard a shuttle orbiter.

Source record↗

NASA NTRS1978

Computation of transonic flow past projectiles at angle of attack

Aerodynamic properties of artillery shell such as normal force and pitching moment reach peak values in a narrow transonic Mach number range. In order to compute these quantities, numerical techniques have been developed to obtain solutions to the three-dimensional transonic small disturbance equation about slender bodies at angle of attack. The computation is based on a plane relaxation technique involving Fourier transforms to partially decouple the three-dimensional difference equations. Particular care is taken to assure accurate solutions near corners found in shell designs. Computed surface pressures are compared to experimental measurements for circular arc and cone cylinder bodies which have been selected as test cases. Computed pitching moments are compared to range measurements for a typical projectile shape.

Reklis, R. P.↗

DOE OSTI2023

Heat Exchangers Circuitry Optimization using Low-GWP Refrigerants in Reversible Heat Pump Applications

Tube-fin heat exchangers (TFHX) are widely used in heat pump applications. Circuitry optimization can improve system performance. Previous optimizations focus on improving component-level performance under a specific operating condition, i.e., the TFHX either works as a condenser or an evaporator. The optimal circuitry obtained under air conditioning (AC) mode cannot guarantee optimal performance when used in heat pump (HP) mode. This study implements a bi-objective formulation to achieve optimal system performance in both AC and HP modes. An integer permutation-based Genetic Algorithm is integrated with Heat Pump Design Model (HPDM) to perform heat pump optimization. Six refrigerants, i.e., R410A, R452B, R454B, R32, D2Y60 and L41a are investigated. Case studies show that optimal heat exchangers yield 2.1%-6.1% EER improvement under AC mode and 1.9%-8.5% COP improvement under HP mode. Use of this design approach can help assure a preferable performance of reversible heat pumps during both cooling and heating mode usage.

Li, Zhenning↗

DOE OSTI2025

Hawaii Threat Brief

The Digital Energy Transformation is redefining how power systems operate, integrating physical infrastructure with digital technologies to enhance efficiency, visibility, and resilience. For islanded and digitally modernizing systems like Hawai‘i’s, this shift presents both new opportunities and evolving challenges in cybersecurity, supply chain assurance, and environmental resilience. This brief provides an overview of critical infrastructure dependencies and systemic risks associated with increasing digital integration. It summarizes recent energy-sector threat activity and case studies that illustrate adversary tactics and supply chain vulnerabilities, and identifies pathways to strengthen resilience.

25 - ENERGY STORAGE↗

DOE OSTI2026

Resilience Through Data-Driven, Intelligent Designed Control: A Formal Methods Approach

The PNNL and GTRI team developed a strategy to integrate temporal logic rule specification for detection of cyber-intrusion in the source code and control algorithms of CPS using advanced cyber-data. The GTRI team utilized its capabilities in rule synthesis and temporal logic specifications for software assurance and verification to detect and predict impact of cyber-intrusions and malware in the computational and control algorithms of cyber-physical systems. The team also developed a testing and verification approach that could be used to validate the suggested approach against a realistic use-case CPS showcasing improvements in system impact prediction performance. Temporal logic offers a compact expression of events in absolute and relative time and has a formalized translation to state machines. As such, temporal logic rules can feasibly be synthesized to any system as a rule engine, with the process being formally verified to be correct. The goal here is to utilize temporal logic rules to detect cyber-attacks and manipulations in the computational algorithms and provide real-time software assurance and verification guarantees.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2020

CA-ResidueRetentionAssumptionsBT16-BaseCase

As part of the Billion Ton resource assessment projections created in 2016 (see https://www.energy.gov/sites/prod/files/2016/12/f34/2016_billion_ton_report_12.2.16_0.pdf, DOI: 10.2172/1435342) -henceforth "BT16", this dataset was used as an assumption to limit the availability of residues under a "base-case" scenario (BC1). Crop residues that had this assumption applied include corn stover, cereal (wheat, oats, and barley) straws, and sorghum stubble. What is the purpose of the data set? Why were the data collected? Per request for use in subsequent research, we have summarized assumptions for California only and selected years (2020, 2030, 2040) that were used in the BT16's base-case projections for agricultural residues and have provided details by tillage class that limited residue availability for harvest (dry tons of residues that must remain). Note: '10' is a high number that assures that no residue harvested could occur. Note: Tillage classification assumptions are also of importance: a low flexibility was applied, allowing a moderate deviation from a baseline situation (using historic CTIC data on tillage type used in counties for each crop). A moderate flexibility, allows farmers to put land into another tillage type (no till, conservation till, and reduced till) where a higher net present value was calculated. This dataset includes all allowable tillage types by crop, but each tillage type may not have occurred in BT16 simulations.

Davis, Maggie↗

DOE OSTI2020

Human Factors Considerations for Automating Microreactors

The U.S. Nuclear Regulatory Commission (NRC) has interacted with vendors pursuing the commercialization of microreactors ( <10 MW th ). It is envisioned that microreactors could be assembled and fueled in a factory and shipped to a site. Many of the sites are expected to be remote locations requiring off-grid power or in some cases military bases. However, before this new class of nuclear reactor can be fully developed and implemented by designers, an effort must be made to explore the technical issues and provide reasonable assurance to the public regarding health and safety impacts centered on various technical issues. Prior works have examined many of these issues. One issue not yet fully explored is the possible change in role of the operations and support personnel. Due to the passive safety features of microreactors and their low level of nuclear material, the microreactor facilities may automate more functions and rely on inherent safety features more than its predecessor nuclear power plants. In some instances, human operators may not be located onsite and may instead be operating or monitoring the facility from a remote location. Some designs also call for operators to supervise and control multiple microreactors from the control room. This report explores the issues around reduced staffing of microreactors, highlights the historical safety functions associated with human operators, assesses current licensing requirements for appropriateness to varying levels of personnel support, and describes a recommended regulatory approach for reviewing the impact of reduced staff to the operation of microreactors. The report evaluates these issues through an extensive literature survey and Subject Matter Expert interviews. The literature covers research topics related to Human Factors Engineering as well as regulatory guidance given by the Nuclear Regulatory Commission.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRS1987

An approximate semi-analytical method for prediction of interlaminar shear stresses in an arbitrarily laminated thick plate

An approximate semianalytical method for determination of interlaminar shear stress distribution through the thickness of an arbitrarily laminated thick plate has been presented. The method is based on the assumptions of transverse inextensibility and layerwise constant shear angle theory (LCST) and utilizes an assumed quadratic displacement potential energy based finite element method (FEM). Centroid of the triangular surface has been proved from a rigorous mathematical point of view (Aubin-Nitsche theory), to be the point of exceptional accuracy for the interlaminar shear stresses. Numerical results indicate close agreement with the available three-dimensional elasticity theory solutions. A comparison between the present theory and that due to an assumed stress hybrid FEM suggest that the (normal) traction-free-edge condition is not satisfied in the latter approach. Furthermore, the present paper is the first to present the results for interlaminar shear stresses in a two-layer thick square plate of balanced unsymmetric angle-ply construction. A comparison with the recently proposed Equilibrium Method (EM) indicates the superiority of the present method, because the latter assures faster convergence as well as simultaneous vanishing of the transverse shear stresses on both of the exposed surfaces of the laminate. Superiority of the present method over the EM, in the case of a symmetric laminate, is limited to faster convergence alone. It has also been demonstrated that the combination of the present method and the reduced (quadratic order) numerical integration scheme yields convergence of the interlaminar shear stresses almost as rapidly as that of the nodal displacements, in the case of a thin plate.

Chaudhuri, Reaz A.↗

NASA NTRS1990

The use of an airborne lidar for mapping cirrus clouds in FIRE, phase 2

The Univ. of Washington (UW) and Georgia Tech have recently built a dual wavelength airborne lidar for operation on the UW's Convair C-131A research aircraft. This lidar was used in studying aerosols and clouds. These studies demonstrated the utility of airborne lidar in a variety of atmospheric research and prompt the suggestion that this facility be included in the next FIRE cirrus experiment. The vertically pointing airborne lidar would be used as a complement to ground based lidars. The airborne lidar would ensure extended coverage of IFO cases that develop upwind of the surface lidars or which miss the ground based lidars while still being the focus of satellite and aircraft in situ studies. The airborne lidar would help assure that cirrus clouds were simultaneously viewed by satellite, sampled by aircraft, and structurally characterized by lidar. System specifications are listed and a schematic is shown of the lidar system aboard the C-131A.

Radke, Lawrence F.↗