Search NASA⌕ Search

SEARCH · Search NASA

Results for “Behavior Based Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

PSA 2025 Presentation: "Modeling and Sensitivity Analysis of a Generation IV Pebble Bed Reactor Using MELCOR 2.2"

Accompanying the advancement of reactor technologies is the need for computational modeling and simulation to predict their behavior under normal operating conditions and accident scenarios. New Generation IV reactor designs which employ non-conventional fuel have a particular need for modeling the behavior and release of radionuclides and other material from the fuel. In this work, MELCOR version 2.2, a system-level safety and accident scenario code developed by Sandia National Laboratories, was used to model a 200-MWth pebble bed modular reactor and calculate the inventories of circulating and deposited graphite, metal dust, and elemental components released from the fuel elements. A base case modeling the reactor under standard operating conditions was calculated using MELCOR and the inventories were extrapolated to 30 years of operation time using a logarithmic regression fit. A sensitivity analysis was also performed in which several key parameters for the base case model were modified to explore the effect of these changes on the inventories calculated by MELCOR. A set of transient scenario simulations for a depressurized loss of forced cooling (DLOFC) accident were also performed. The results of the sensitivity analysis and transient simulations are reported and discussed in relation to the modeling techniques used for this study.

22 - GENERAL STUDIES OF NUCLEAR REACTORS↗

MARGInS Model-Based Analysis of Realizable Goals in Systems

The high complexity of modern aircraft and spacecraft requires elaborate Verification and Validation (V&V) approaches to make sure that such complex systems work properly and reliably. MARGInS is a framework for the analysis, understanding, and prediction of the behavior of a complex, hybrid system. MARGInS contains a set of machine learning and statistical algorithms for multivariate clustering, treatment learning, critical factor determination, time-series analysis, event prediction, and safety-boundary detection and characterization. The framework supports system testing and can be configured to find novel features in test suites, determine classes of behavior, propose new experiments that can efficiently explore and characterize the boundaries between classes of system behavior, and to create visualizations and reports.

He, Yuning↗

Assessment of the BISON Metallic Fuel Performance Models

The US Department of Energy is leading a project to design and construct a fast spectrum test reactor called the Versatile Test Reactor (VTR). The BISON nuclear fuel performance code will be used to model VTR driver fuel, including looking at the effects of differences between the VTR driver fuel element design and the legacy fuel designs and experiments on which it is based. Simulations will be conducted to help determine whether the design’s behavior and performance are properly understood and to assess the margins to cladding failure and fuel melting relative to those predicted for past metallic fuel experiments. These predictions are expected to streamline VTR design and operation by helping inform the VTR driver fuel element design and by providing supplemental information for the fuel design safety basis.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Discovering the Regulatory Considerations of the Federal Aviation Administration: Interviewing the Aviation Rulemaking Advisory Committee

Maintenance Resource Management (MRM) training for aviation mechanics has become mandatory in many industrialized countries since 1998. Yet, to date, MRM training remains optional in the U.S. Interestingly, a similar safety discipline, namely Crew/Cockpit Resource Management (CRM), is mandatory for pilots, flight engineers, flight attendants, and dispatchers and is regulated in the Federal Aviation Administration s (FAA) Federal Aviation Regulations (FARs). If MRM training is important to enhance aviation technicians working behavior, the rationale to not regulate it opens a window for study. This research aims to inductively investigate the FAA s regulatory rationale concerning MRM training based on direct inputs from the FAA s Aviation Rulemaking Advisory Committee (ARAC) members. Delphi methodology associated with purposive sampling technique was adopted. The result revealed that the FAA cannot regulate MRM because the aviation industry is strongly opposed to it due to the lack of training budgets, the need of a quantifiable cost-effect analysis, concern over the FAA s inspection workforce, an ongoing voluntary alternative called the Air Transportation Surveillance System (ATOS), the government s lower priority on maintenance after 9/11, and the airlines tight embracement of operational flexibility without regulation.

Lu, Chien-tsung↗

Situational Leadership in Air Traffic Control

In high-risk environments such as air traffic control, leadership on different levels plays a certain role in establishing, promoting, and maintaining a good safety culture. The current study aimed to investigate how leadership styles, leadership style adaptability, and over and under task leadership behavior differed across situations, operative conditions, leadership structures, and working tasks in an air traffic control setting. Study locations were two air traffic control centers in Sweden with different operational conditions and leadership structures, and an administrative air traffic management unit. Leadership was measured with a questionnaire based on Leader Effectiveness and Adaptability Description (LEAD; Blanchard, Zigarmi & Zigarmi, 2003; Hersey & Blanchard, 1988). The results showed that the situation had strong impact on the leadership in which the leadership behavior was more relationship oriented in Success and Group situations than in Hardship and Individual situations. The leadership adaptability was further superior in Success and Individual situations compared with Hardship and Group situations. Operational conditions, leadership structures and working tasks were, on the other hand, not associated with leadership behavior.

Arvidsson, Marcus↗

Prevention of Over-Pressurization During Combustion in a Sealed Chamber

The combustion of flammable material in a sealed chamber invariably leads to an initial pressure rise in the volume. The pressure rise is due to the increase in the total number of gaseous moles (condensed fuel plus chamber oxygen combining to form gaseous carbon dioxide and water vapor) and, most importantly, the temperature rise of the gas in the chamber. Though the rise in temperature and pressure would reduce with time after flame extinguishment due to the absorption of heat by the walls and contents of the sealed spacecraft, the initial pressure rise from a fire, if large enough, could lead to a vehicle over-pressure and the release of gas through the pressure relief valve. This paper presents a simple lumped-parameter model of the pressure rise in a sealed chamber resulting from the heat release during combustion. The transient model considers the increase in gaseous moles due to combustion, and heat transfer to the chamber walls by convection and radiation and to the fuel-sample holder by conduction, as a function of the burning rate of the material. The results of the model are compared to the pressure rise in an experimental chamber during flame spread tests as well as to the pressure falloff after flame extinguishment. The experiments involve flame spread over thin solid fuel samples. Estimates of the heat release rate profiles for input to the model come from the assumed stoichiometric burning of the fuel along with the observed flame spread behavior. The sensitivity of the model to predict maximum chamber pressure is determined with respect to the uncertainties in input parameters. Model predictions are also presented for the pressure profile anticipated in the Fire Safety-1 experiment, a material flammability and fire safety experiment proposed for the European Space Agency (ESA) Automated Transfer Vehicle (ATV). Computations are done for a range of scenarios including various initial pressures and sample sizes. Based on these results, various mitigation approaches are suggested to prevent vehicle over-pressurization and help guide the definition of the space experiment.

Gokoglu, Suleyman A.↗

Defining A Modelling Language to Support Functional Hazard Assessment

Functional Hazard Assessment (FHA) is a key early-stage engineering process that supports the incorporation of safety in design by identifying the high-level functional hazards the system may encounter. While many FHA-like methodologies have been proposed in the design engineering literature, many of these methodologies have had difficulty becoming accepted industry practice. Industry standards, on the other hand, either provide little recommendation on how to represent the function of the system to perform FHA, or rely on readily-available models with little justification in design theory. This paper presents some of the problems with current modelling languages used for FHA which limit the scope, expressiveness, flexibility, and precision of the analysis, as well as desirable principles an FHA-supporting analysis language should embody. It further introduces the Functional Reasoning Design Language (FRDL), a formal modelling language for describing the functional behaviors of a system and their interactions which satisfies these principles. To demonstrate the use of this language, the modelling and hazard analysis of a disaster response drone is presented.

safety analysis↗

Modeling Approach for the Aluminum-clad Dry Storage Pilot using HFIR Fuel

To confirm that the dry storage of aluminum-clad research reactor spent nuclear fuel (ASNF) will remain within the safety envelope after applied drying schemes and that the resulting evolution of the gas space composition, temperature, and pressure conditions are understood, a dry storage pilot project is being established. The pilot will incorporate an instrumented lid for discrete interval or for on-demand gas composition and temperature monitoring of two DOE Standard Canisters (DSCs) loaded with three High Flux Isotope Reactor (HFIR) inner cores per DSC. Each DSC would be subjected to a separate alternative candidate drying scheme. Canisters will undergo 1 to 5 years of monitoring, including internal temperature and gas sampling to track pressure and composition changes. This report outlines the approach for modeling the ASNF-in-canister behavior in terms of evolving gas space conditions for the ASNF dry storage pilot using HFIR fuel. The ASNF has an adherent surface oxyhydroxide layer comprised of boehmite/bayerite that generates hydrogen when subjected to irradiation. Three-dimensional multi-physics computational fluid dynamics simulations will be executed to compute the thermal field within the DSC and provide inputs to a chemical model employed to compute pressure buildup as hydrogen is generated in the system. Implemented in Cantera, the chemical model solves gas phase and aluminum oxyhydroxide surface-mediated radiolysis reactions. Gas phase reactions are sourced from Wittman and Hanson (2015), whereas surface-mediated reactions are incorporated by fitting experimental data using an optimization algorithm (Abboud, 2023). Water radiolysis reactions from Wren and Ball (2001) are adopted with modifications as described in Abboud (2023c). Understanding the effect of the hydrogen buildup over time is important for long-term storage safety considerations. Modeling results will include the canister pressure, temperature, and composition evolution from the initial helium backfill with the addition of radiolytically-evolved chemical species (e.g., hydrogen and oxygen). The specific HFIR cores for the pilot program have not yet been selected, and the overall design is still in development. The CFD-chemical model used for this work will be based on prior models with necessary updates to allow for improved accuracy and efficiency. The experimental data obtained from the HFIR demonstration will be used to improve and validate the computational models to predict the ASNF-in-canister behavior.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Can we safely go to 200 °C? An integrated approach to assessing impacts to the engineered barrier system in a high-temperature repository

Abstract. This presentation gives on overview of the complex thermo-hydro-mechanical-chemical (THMC) processes occurring during the disposal of heat-producing high-level radioactive waste in geologic repositories. A specific focus is on the role of compacted bentonite, which is commonly used as an engineered backfill material for emplacement tunnels because of its low permeability, high swelling pressure, and radionuclide retention capacity. Laboratory and field tests integrated with THMC modeling have provided an effective way to deepen our understanding of temperature-related perturbations in the engineered barrier system; however, most of this work has been conducted for maximum temperatures around 100 ∘C. In contrast, some international disposal programs have recently started investigations to understand whether local temperatures in the bentonite of up to 200 ∘C could be tolerated with no significant changes to safety relevant properties. Raising the maximum temperature is attractive for economical and safety reasons but faces the challenge of exposing the bentonite to significant temperature increases. Strong thermal gradients may induce complex moisture transport processes while geochemical processes, such as cementation and perhaps also illitization effects may occur, all of which could strongly affect the bentonite and near-field rock properties. Here, we present initial investigations of repository behavior exposed to strongly elevated temperatures. We will start discussing our current knowledge base for temperature effects in repositories exposed to a maximum temperature of 100 ∘C, based on data and related modeling analysis from a large heater experiment conducted for over 18 years in the Grimsel Test Site in Switzerland. We then show results from coupled THMC simulations of a nuclear waste repository in a clay formation exposed to a maximum temperature of 200 ∘C. We also explore preliminary data from a bench-scale laboratory mock-up experiment, which was designed to represent the strong THMC gradients occurring in a “hot” repository, and we finally touch on a full-scale field heater test to be conducted soon in the Grimsel Test Site underground research laboratory in Switzerland (referred to as HotBENT).

Birkholzer, Jens T. (ORCID:0000000279891912)↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

Unsupervised anomaly clustering via offset alignment in multivariate grid sensing data

Modern industries increasingly rely on multi-sensor technologies to acquire complex, high-dimensional data streams, enabling advanced monitoring and control systems. One critical application is online anomaly detection in electrical smart grids, where multivariate and multimodal sensing technologies play a vital role. However, detecting anomalies in such time-series data is challenging due to their inherent temporal dependencies and stochastic behavior. Traditional approaches based on supervised and semi-supervised learning methods depend on labeled datasets, which are often unavailable in real-world scenarios. While unsupervised methods have emerged as promising alternatives, these methods are highly susceptible to noise and outliers commonly present in sensing applications. Furthermore, deep learning-based anomaly detection methods, despite their performance, are often criticized for their black-box nature, limiting their applicability in safety-critical and online environments where interpretability and explainability are paramount. In this work, we propose an unsupervised anomaly clustering method leveraging a cyclic alignment-based offset detection algorithm for multivariate time-series signals. The proposed method is applied to multivariate data collected from vibrational, voltage, and magnetic field sensors deployed in a local grid substation. Our results demonstrate the robustness of the algorithm in accurately clustering various anomalies/events across different sensing modalities. Additionally, we compare the effectiveness of the proposed approach against a simple pattern-based anomaly detection method, which performs well for univariate data but fails to generalize to multivariate and multimodal time-series data.

Mukherjee, Subrata [ORNL] (ORCID:0000000309930338)↗

Data Based Shock Test Specification

It is vital that avionic packages used for testing and certifying the reliability and safety of U.S. nuclear weapons with platform aircraft survive exposure to shock environments during transportation and delivery. The objective of this research was to characterize the response to these transportation shock environments delivering accurate shock test specifications in order to set laboratory programming material and device certification rigor. Responses to shock events were analyzed in the frequency domain via the Shock Response Spectrum (SRS). Shocks were then grouped based on respective behavior of maximum response accelerations which were pseudorandomly resampled and compared to test data to form test specifications based on the MinerPalmgren hypothesis. In addition to discovering significant over testing in current shock specifications, a new systematic, data-driven approach to designing shock specifications was formulated.

42 ENGINEERING↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

Learning the Task Management Space of an Aircraft Approach Model

Validating models of airspace operations is a particular challenge. These models are often aimed at finding and exploring safety violations, and aim to be accurate representations of real-world behavior. However, the rules governing the behavior are quite complex: nonlinear physics, operational modes, human behavior, and stochastic environmental concerns all determine the responses of the system. In this paper, we present a study on aircraft runway approaches as modeled in Georgia Tech's Work Models that Compute (WMC) simulation. We use a new learner, Genetic-Active Learning for Search-Based Software Engineering (GALE) to discover the Pareto frontiers defined by cognitive structures. These cognitive structures organize the prioritization and assignment of tasks of each pilot during approaches. We discuss the benefits of our approach, and also discuss future work necessary to enable uncertainty quantification.

Validation↗

Patchy nuclear chain reactions

Stochastic fluctuations of the neutron population within a nuclear reactor are typically prevented by operating the core at a sufficient power, since a deterministic (i.e., exactly predictable) behavior of the neutron population is required by automatic safety systems to detect unwanted power excursions. In order to characterize the reactor operating conditions at which the fluctuations vanish, an experiment was designed and took place in 2017 at the Rensselaer Polytechnic Institute Reactor Critical Facility. This experiment however revealed persisting fluctuations and striking patchy spatial patterns in neutron spatial distributions. Here we report these experimental findings, interpret them by a stochastic modeling based on branching random walks, and extend them using a “numerical twin” of the reactor core. Consequences on nuclear safety will be discussed.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

The Study of the Relationship between Probabilistic Design and Axiomatic Design Methodology

The structural design, or the design of machine elements, has been traditionally based on deterministic design methodology. The deterministic method considers all design parameters to be known with certainty. This methodology is, therefore, inadequate to design complex structures that are subjected to a variety of complex, severe loading conditions. A nonlinear behavior that is dependent on stress, stress rate, temperature, number of load cycles, and time is observed on all components subjected to complex conditions. These complex conditions introduce uncertainties; hence, the actual factor of safety margin remains unknown. In the deterministic methodology, the contingency of failure is discounted; hence, there is a use of a high factor of safety. It may be most useful in situations where the design structures are simple. The probabilistic method is concerned with the probability of non-failure performance of structures or machine elements. It is much more useful in situations where the design is characterized by complex geometry, possibility of catastrophic failure, sensitive loads and material properties. Also included: Comparative Study of the use of AGMA Geometry Factors and Probabilistic Design Methodology in the Design of Compact Spur Gear Set.

Onwubiko, Chin-Yere↗

Probabilistic Design Analysis (PDA) Approach to Determine the Probability of Cross-System Failures for a Space Launch Vehicle

Quantifying the probability of significant launch vehicle failure scenarios for a given design, while still in the design process, is critical to mission success and to the safety of the astronauts. Probabilistic risk assessment (PRA) is chosen from many system safety and reliability tools to verify the loss of mission (LOM) and loss of crew (LOC) requirements set by the NASA Program Office. To support the integrated vehicle PRA, probabilistic design analysis (PDA) models are developed by using vehicle design and operation data to better quantify failure probabilities and to better understand the characteristics of a failure and its outcome. This PDA approach uses a physics-based model to describe the system behavior and response for a given failure scenario. Each driving parameter in the model is treated as a random variable with a distribution function. Monte Carlo simulation is used to perform probabilistic calculations to statistically obtain the failure probability. Sensitivity analyses are performed to show how input parameters affect the predicted failure probability, providing insight for potential design improvements to mitigate the risk. The paper discusses the application of the PDA approach in determining the probability of failure for two scenarios from the NASA Ares I project

Shih, Ann T.↗