Search NASASearch

SEARCH · Search NASA

Results for “Program verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

C formal verification with unix communication and concurrency

The results of a NASA SBIR project are presented in which CSP-Ariel, a verification system for C programs which use Unix system calls for concurrent programming, interprocess communication, and file input and output, was developed. This project builds on ORA's Ariel C verification system by using the system of Hoare's book, Communicating Sequential Processes, to model concurrency and communication. The system runs in ORA's Clio theorem proving environment. The use of CSP to model Unix concurrency and sketch the CSP semantics of a simple concurrent program is outlined. Plans for further development of CSP-Ariel are discussed. This paper is presented in viewgraph form.

Hoover, Doug N.

General Environmental Verification Specification

The NASA Goddard Space Flight Center s General Environmental Verification Specification (GEVS) for STS and ELV Payloads, Subsystems, and Components is currently being revised based on lessons learned from GSFC engineering and flight assurance. The GEVS has been used by Goddard flight projects for the past 17 years as a baseline from which to tailor their environmental test programs. A summary of the requirements and updates are presented along with the rationale behind the changes. The major test areas covered by the GEVS include mechanical, thermal, and EMC, as well as more general requirements for planning, tracking of the verification programs.

Milne, J. Scott, Jr.

Decision Engines for Software Analysis Using Satisfiability Modulo Theories Solvers

The area of software analysis, testing and verification is now undergoing a revolution thanks to the use of automated and scalable support for logical methods. A well-recognized premise is that at the core of software analysis engines is invariably a component using logical formulas for describing states and transformations between system states. The process of using this information for discovering and checking program properties (including such important properties as safety and security) amounts to automatic theorem proving. In particular, theorem provers that directly support common software constructs offer a compelling basis. Such provers are commonly called satisfiability modulo theories (SMT) solvers. Z3 is a state-of-the-art SMT solver. It is developed at Microsoft Research. It can be used to check the satisfiability of logical formulas over one or more theories such as arithmetic, bit-vectors, lists, records and arrays. The talk describes some of the technology behind modern SMT solvers, including the solver Z3. Z3 is currently mainly targeted at solving problems that arise in software analysis and verification. It has been applied to various contexts, such as systems for dynamic symbolic simulation (Pex, SAGE, Vigilante), for program verification and extended static checking (Spec#/Boggie, VCC, HAVOC), for software model checking (Yogi, SLAM), model-based design (FORMULA), security protocol code (F7), program run-time analysis and invariant generation (VS3). We will describe how it integrates support for a variety of theories that arise naturally in the context of the applications. There are several new promising avenues and the talk will touch on some of these and the challenges related to SMT solvers. Proceedings

Bjorner, Nikolaj

Real-Time Kennedy Space Center and Cape Canaveral Air Force Station High-Resolution Model Implementation and Verification

NASA's Launch Services Program, Ground Systems Development and Operations, Space Launch System and other programs at Kennedy Space Center (KSC) and Cape Canaveral Air Force Station (CCAFS) use the daily and weekly weather forecasts issued by the 45th Weather Squadron (45 WS) as decision tools for their day-to-day and launch operations on the Eastern Range (ER). Examples include determining if they need to limit activities such as vehicle transport to the launch pad, protect people, structures or exposed launch vehicles given a threat of severe weather, or reschedule other critical operations. The 45 WS uses numerical weather prediction models as a guide for these weather forecasts, particularly the Air Force Weather Agency (AFWA) 1.67 km Weather Research and Forecasting (WRF) model. Considering the 45 WS forecasters' and Launch Weather Officers' (LWO) extensive use of the AFWA model, the 45 WS proposed a task at the September 2013 Applied Meteorology Unit (AMU) Tasking Meeting requesting the AMU verify this model. Due to the lack of archived model data available from AFWA, verification is not yet possible. Instead, the AMU proposed to implement and verify the performance of an ER version of the high-resolution WRF Environmental Modeling System (EMS) model configured by the AMU (Watson 2013) in real time. Implementing a real-time version of the ER WRF-EMS would generate a larger database of model output than in the previous AMU task for determining model performance, and allows the AMU more control over and access to the model output archive. The tasking group agreed to this proposal; therefore the AMU implemented the WRF-EMS model on the second of two NASA AMU modeling clusters. The AMU also calculated verification statistics to determine model performance compared to observational data. Finally, the AMU made the model output available on the AMU Advanced Weather Interactive Processing System II (AWIPS II) servers, which allows the 45 WS and AMU staff to customize the model output display on the AMU and Range Weather Operations (RWO) AWIPS II client computers and conduct real-time subjective analyses.

Meteorology

Flight-test determination of aircraft cruise characteristics using acceleration and deceleration techniques

A flight-test technique has been developed under NASA Dryden sponsorship NSG 4028 to predict aircraft cruise performance characteristics. The technique used acceleration and deceleration maneuvers to define baseline aerodynamic and propulsion system characteristics, which were then input to a performance modeling prediction program. Conventional stabilized 'speed power' tests, which are normally used for cruise performance definition, can comprise a large portion of the flight time in a program. A significant reduction in flight time was estimated using the performance modeling approach with associated savings in cost and schedule. A 20-h verification flight-test program was accomplished.

Yechout, T. R.

U.S. Spacesuit Knowledge Capture – Chronicling Spacesuit Design for the Future

With less than 4 years until the United States is scheduled to land the first woman and next man on the Moon, NASA is leveraging 60 years of experience to build a spacesuit to assist in the success of this and future human space exploration missions. This experience comes from the achievements of retired and employed spacesuit experts, innovations that were conceived from existing ideas and inventions, and a plethora of archived knowledge. The U.S. Spacesuit Knowledge Capture (SKC) Program’s primary function is to capture, archive, and share current and legacy spacesuit-related knowledge with scientists, engineers, and technicians. To capture valuable spacesuit-related knowledge, the program uses various methods that have included hosting and recording classroom and online courses, workshops, and vignettes, and preserving thousands of legacy spacesuit-related files. In 2019, the SKC Program added to its role when it began coordinating the electronic recording of the new spacesuits’ buildup. This new, next-generation spacesuit is named the Exploration Extravehicular Mobility Unit (xEMU) and is a compilation of many components. As each component is tested and assembled into the suit, the SKC Program is chronicling this buildup using high-speed video production and photography that includes time-lapsed images. To complement the recording of the components, the SKC Program plans to record and photograph the design verification testing. In 2020, the SKC Program was given the initiative to research and identify the custodianship of historical spacesuit equipment that resides within the Crew and Thermal Systems Division. These archives will be added to the SKC Program’s expansive archived collection of spacesuit-related knowledge that represents over 5 decades of spacesuit legacy from the Apollo era to the pursuit of Mars and beyond. This paper describes the electronic documentation of the xEMU’s buildup and identifies the SKC Program’s 2020 accomplishments.

Cinda Chullen

U.S. Spacesuit Knowledge Capture – Chronicling Spacesuit Design for the Future

With less than 4 years until the United States is scheduled to land the first woman and next man on the Moon, NASA is leveraging 60 years of experience to build a spacesuit to assist in the success of this and future human space exploration missions. This experience comes from the achievements of retired and employed spacesuit experts, innovations that were conceived from existing ideas and inventions, and a plethora of archived knowledge. The U.S. Spacesuit Knowledge Capture (SKC) Program’s primary function is to capture, archive, and share current and legacy spacesuit-related knowledge with scientists, engineers, and technicians. To capture valuable spacesuit-related knowledge, the program uses various methods that have included hosting and recording classroom and online courses, workshops, and vignettes, and preserving thousands of legacy spacesuit-related files. In 2019, the SKC Program added to its role when it began coordinating the electronic recording of the new spacesuits’ buildup. This new, next-generation spacesuit is named the Exploration Extravehicular Mobility Unit (xEMU) and is a compilation of many components. As each component is tested and assembled into the suit, the SKC Program is chronicling this buildup using high-speed video production and photography that includes time-lapsed images. To complement the recording of the components, the SKC Program plans to record and photograph the design verification testing. In 2020, the SKC Program was given the initiative to research and identify the custodianship of historical spacesuit equipment that resides within the Crew and Thermal Systems Division. These archives will be added to the SKC Program’s expansive archived collection of spacesuit-related knowledge that represents over 5 decades of spacesuit legacy from the Apollo era to the pursuit of Mars and beyond. This paper describes the electronic documentation of the xEMU’s buildup and identifies the SKC Program’s 2020 accomplishments.

Cinda Chullen

Software Verification of VARPOW

The VARPOW program is a post-processing utility program for DIF3D, specifically DIF3DVARIANT, and it was developed to provide interface files for the thermal analysis program DASSH. The basic methodology of VARPOW is to take the neutron and gamma flux (moments) calculated by DIF3D (or GAMSOR) and combine them with the heating (coefficient) cross sections to calculate the spatial power distributions using the DIF3DVARIANT spatial basis. VARPOW can use the output from GAMSOR (both steady state neutron and gamma flux calculations) or standard DIF3D/REBUS calculations (neutron flux only). The correct approach for defining the power distribution is to use GAMSOR as its purpose was to properly compute the gamma heating throughout the modeled domain. The power densities calculated by VARPOW are broken into fuel, cladding and coolant terms for which isotope-wise categorization is needed. VARPOW has built in options the user can select for the isotope categorization or VARPOW can import a file that details the isotope categorization. VARPOW can export the solution in the polynomial basis of DIF3D-VARIANT or the monomial basis of DIF3D-VARIANT. The purpose of this work is to verify the power distribution results calculated by VARPOW from both the GAMSOR and DIF3D input options and verify that the input and output options are consistent with the manual. Hand calculation and independent numerical calculation are used for this verification work.

97 MATHEMATICS AND COMPUTING

Software Verification of VARPOW

The VARPOW program is a post-processing utility program for DIF3D, specifically DIF3DVARIANT, and it was developed to provide interface files for the thermal analysis program DASSH. The basic methodology of VARPOW is to take the neutron and gamma flux (moments) calculated by DIF3D (or GAMSOR) and combine them with the heating (coefficient) cross sections to calculate the spatial power distributions using the DIF3DVARIANT spatial basis. VARPOW can use the output from GAMSOR (both steady state neutron and gamma flux calculations) or standard DIF3D/REBUS calculations (neutron flux only). The correct approach for defining the power distribution is to use GAMSOR as its purpose was to properly compute the gamma heating throughout the modeled domain. The power desnities calculated by VARPOW are broken into fuel, cladding and coolant terms for which isotope-wise categorization is needed. VARPOW has built in options the user can select for the isotope categorization or VARPOW can import a file that details the isotope categorization. VARPOW can export the solution in the polynomial basis of DIF3D-VARIANT or the monomial basis of DIF3D-VARIANT. The purpose of this work is to verify the power distribution results calculated by VARPOW from both the GAMSOR and DIF3D input options and verify that the input and output options are consistent with the manual. Hand calculation and independent numerical calculation are used for this verification work.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS

Software Verification of VARPOW

The VARPOW program is a post-processing utility program for DIF3D, specifically DIF3DVARIANT, and it was developed to provide interface files for the thermal analysis program DASSH. The basic methodology of VARPOW is to take the neutron and gamma flux (moments) calculated by DIF3D (or GAMSOR) and combine them with the heating (coefficient) cross sections to calculate the spatial power distributions using the DIF3DVARIANT spatial basis. VARPOW can use the output from GAMSOR (both steady state neutron and gamma flux calculations) or standard DIF3D/REBUS calculations (neutron flux only). The correct approach for defining the power distribution is to use GAMSOR as its purpose was to properly compute the gamma heating throughout the modeled domain. The power desnities calculated by VARPOW are broken into fuel, cladding and coolant terms for which isotope-wise categorization is needed. VARPOW has built in options the user can select for the isotope categorization or VARPOW can import a file that details the isotope categorization. VARPOW can export the solution in the polynomial basis of DIF3D-VARIANT or the monomial basis of DIF3D-VARIANT. Recently the clad neutron damage calculation capability was introduced into VARPOW, and it now allows a pathway to get distributions of clad DPA. The purpose of this work is to verify the power distribution, fast neutron flux and clad DPA results calculated by VARPOW from both the GAMSOR and DIF3D input options and verify that the input and output options are consistent with the manual. Hand calculation and independent numerical calculation are used for this verification work.

Zhong, Zhaopeng [Argonne National Laboratory (ANL)

Orbiter structural design and verification

The space shuttle development program provided the opportunity to challenge many of the established practices and approaches used in prior manned space flight programs. The most significant accomplishments and resulting precedents which emerged during the structural development of the space shuttle and the space shuttle orbiter are reviewed. Innovations in criteria, design solutions, and certification are highlighted, and brief comments on the lessons learned are included. Thermal stress, graphite epoxy moisture, window structure, and structural inspection are discussed under lessons learned.

Glynn, P. C.

Replication Package for "Union-Find and Usability: A Case Study and Analysis of Rust Formal Verifier

This replication package is a case study on automated deductive verification for Rust for practical programs. It is a companion artifact to a corresponding usability study on verification titled "Union-Find and Usability: A Case Study and Analysis of Rust Formal Verifiers". It seeks to answer the question "Can Rust developers today use Rust verifiers to verify their code?". To answer this question, the study contrasts the verification experience of two mature Rust verifiers, Creusot and Prusti, by using the tools to develop a verified implementation of union-find in Rust. The union-find implementation is based on real-world code as used in the popular egg E-graph library. The artifact consists of two different verified libraries, one using Creusot and one using Prusti. The libraries have similar Rust interfaces and high-level proofs but differ in their details: Creusot and Prusti have different annotation languages and support different proof styles. Each implementation can be verified with its respective tool and compiles as a traditional Rust development.

Sarracino, John

The design integration of wingtip devices for light general aviation aircraft

An investigation was conducted to determine the load carrying capabilities and structural design requirements for wingtip devices on general aviation aircraft. Winglets were designed and analyzed as part of a research program involving a typical agricultural aircraft. This effort involved analytical load prediction for the winglets, structural design for both the winglets and aircraft installation, structural load testing and flight test verification. Conclusions from this program are believed to be applicable to the use of wingtip devices on light-weight general aviation aircraft.

Gifford, R. V.

Program Model Checking: A Practitioner's Guide

Program model checking is a verification technology that uses state-space exploration to evaluate large numbers of potential program executions. Program model checking provides improved coverage over testing by systematically evaluating all possible test inputs and all possible interleavings of threads in a multithreaded system. Model-checking algorithms use several classes of optimizations to reduce the time and memory requirements for analysis, as well as heuristics for meaningful analysis of partial areas of the state space Our goal in this guidebook is to assemble, distill, and demonstrate emerging best practices for applying program model checking. We offer it as a starting point and introduction for those who want to apply model checking to software verification and validation. The guidebook will not discuss any specific tool in great detail, but we provide references for specific tools.

Pressburger, Thomas T.

Spacecraft Requirements Development and Tailoring

Spacecraft design is managed through the use of design requirements. Requirements are flowed from the highest level, the overall spacecraft, to systems, subsystems and ultimately individual components. Through the use of requirements, each part of the spacecraft will perform the functions that are required of it and will interface to the rest of the spacecraft. Functional requirements are used to make sure every component performs as expected and interface requirements ensure that each component works within the larger design environment where it operates. Writing good requirements is difficult and the verification of requirements can be expensive and time consuming. Because of this difficulty and expense, it is important that each requirement truly be “required” and critical to the overall performance of the vehicle. It is also important that requirements can be changed or eliminated as the system matures to minimize verification cost and schedule. The Capsule Parachute Assembly System (CPAS) Project is developing the parachute system for the NASA Multi-Purpose Crew Vehicle (MPCV) Orion Spacecraft. Throughout the development and qualification cycle for CPAS, requirements have been evaluated, added, eliminated, or more generically, “tailored”, to ensure that the system performs as required while minimizing the verification cost to the Program. One facet of this tailoring has been to delete requirements that do not add value to the overall spacecraft or are not needed. A second approach to minimize the cost of requirement verification has been to evaluate requirements based on the actual design as it has matured. As the design of the parachute system has become better understood, requirements that are not applicable have been eliminated. This paper will outline the evolution of CPAS requirements over time and will show how careful and considered changes to requirements can benefit the technical solution for the overall system design while allowing a Project to control costs.

Mcmichael, James H.

Automatic Estimation of Verified Floating-Point Round-Off Errors via Static Analysis

This paper introduces a static analysis technique for computing formally verified round-off error bounds of floating-point functional expressions. The technique is based on a denotational semantics that computes a symbolic estimation of floating-point round-o errors along with a proof certificate that ensures its correctness. The symbolic estimation can be evaluated on concrete inputs using rigorous enclosure methods to produce formally verified numerical error bounds. The proposed technique is implemented in the prototype research tool PRECiSA (Program Round-o Error Certifier via Static Analysis) and used in the verification of floating-point programs of interest to NASA.

Moscato, Mariano

Damage Detection and Verification System (DDVS) for In-Situ Health Monitoring

Project presentation for Game Changing Program Smart Book Release. Detection and Verification System (DDVS) expands the Flat Surface Damage Detection System (FSDDS) sensory panels damage detection capabilities and includes an autonomous inspection capability utilizing cameras and dynamic computer vision algorithms to verify system health. Objectives of this formulation task are to establish the concept of operations, formulate the system requirements for a potential ISS flight experiment, and develop a preliminary design of an autonomous inspection capability system that will be demonstrated as a proof-of-concept ground based damage detection and inspection system.

Damage detection

Model Checking JAVA Programs Using Java Pathfinder

This paper describes a translator called JAVA PATHFINDER from JAVA to PROMELA, the "programming language" of the SPIN model checker. The purpose is to establish a framework for verification and debugging of JAVA programs based on model checking. This work should be seen in a broader attempt to make formal methods applicable "in the loop" of programming within NASA's areas such as space, aviation, and robotics. Our main goal is to create automated formal methods such that programmers themselves can apply these in their daily work (in the loop) without the need for specialists to manually reformulate a program into a different notation in order to analyze the program. This work is a continuation of an effort to formally verify, using SPIN, a multi-threaded operating system programmed in Lisp for the Deep-Space 1 spacecraft, and of previous work in applying existing model checkers and theorem provers to real applications.

Havelund, Klaus