Results for “FLIGHT HAZARD” — Page 18

NASA NTRSDate not supplied

NASA and Blue Origin’s Flight Assessment of Precision Landing Algorithms Computing Performance

NASA’s Safe and Precise Landing - Integrated Capabilities Evolution (SPLICE) project continues NASA’s work in the development and testing of technologies for Precision Landing and Hazard Avoidance (PL&HA). This paper presents results characterizing how SPLICE flight software utilizes the shared computing resources of the Descent Landing Computer (DLC), one of the PL&HA technologies under development. The SPLICE technologies are being tested as an integrated payload on Blue Origin’s New Shephard suborbital vehicle. The results presented in this paper are measured by applications running in and with the flight software both in flight, and in a high-fidelity Hardware-in-the-Loop (HWIL) simulation environment. Linux utilities to measure performance are also executed from the command line in the HWIL configuration. Performance measurements of the SPLICE workloads executing on the DLC provide insight on how efficiently the software is utilizing the DLC resources. Examples of how these measurements have guided improvements in the flight code are presented. In addition, the DLC uses a commercial processor as a surrogate for NASA’s High Performance Spaceflight Computing (HPSC) processor. This work provides insight on how an HPSC system may perform delivering PL&HA capabilities on a future mission. The measurements also can be used to infer architectural requirements for PL&HA capabilities, informing the HPSC project and other flight computer development efforts. Examples of the measurements collected include processor utilization, I/O bandwidth, cache and branch misses, and application profiles.

Precision Landing and Hazard Avoidance↗

NASA NTRS2005

Joint Test Protocol for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel

Headquarters National Aeronautics and Space Administration (NASA) chartered the Acquisition Pollution Prevention (AP2) Office to coordinate agency activities affecting pollution prevention issues identified during system and component acquisition and sustainment processes. The primary objectives of the AP2 Office are to: (1) Reduce or eliminate the use of hazardous materials (HazMats) or hazardous processes at manufacturing, remanufacturing, and sustainment locations. (2) A void duplication of effort in actions required to reduce or eliminate HazMats through joint center cooperation and technology sharing. This project will identify, evaluate and approve alternative surface preparation technologies for use at NASA and Air Force Space Command (AFSPC) installations. Materials and processes will be evaluated with the goal of selecting those processes that will improve corrosion protection at critical systems, facilitate easier maintenance activity, extend maintenance cycles, eliminate flight hardware contamination and reduce the amount of hazardous waste generated. This Joint Test Protocol (JTP) contains the critical requirements and tests necessary to qualify alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel Applications. These tests were derived from engineering, performance, and operational impact (supportability) requirements defined by a consensus of NASA and Air Force Space Command (AFSPC) participants. The Field Test Plan (FTP), entitled Joint Test Protocol for Validation of Alternative Low Emission Surface Preparation/Depainting Technologies for Structural Steel, prepared by ITB, defines the field evaluation and testing requirements for validating alternative surface preparation/depainting technologies and supplements the JTP.

Lewis, Pattie↗

NASA NTRS2003

Pilot Interactions in an Over-Constrained Conflict Scenario as Studied in a Piloted Simulation of Autonomous Aircraft Operations

Feasibility and safety of autonomous aircraft operations were studied in a multi-piloted simulation of overconstrained traffic conflicts to determine the need for, and utility of, priority flight rules to maintain safety in this extraordinary and potentially hazardous situation. An overconstrained traffic conflict is one in which the separation assurance objective is incompatible with other objectives. In addition, a proposed scheme for implementing priority flight rules by staggering the alerting time between the two aircraft in conflict was tested for effectiveness. The feasibility study was conducted through a simulation in the Air Traffic Operations Laboratory at the NASA Langley Research Center. This research activity is a continuation of the Distributed Air-Ground Traffic Management feasibility analysis reported in the 4th USA/Europe Air Traffic Management R&D Seminar in December 2001 (paper #48). The over-constrained conflict scenario studied here consisted of two piloted aircraft that were assigned an identical en-route waypoint arrival time and altitude crossing restriction. The simulation results indicated that the pilots safely resolved the conflict without the need for a priority flight rule system. Occurrences of unnecessary maneuvering near the common waypoint were traced to false conflict alerts, generated as the result of including waypoint constraint information in the broadcast data link message issued from each aircraft. This result suggests that, in the conservative interests of safety, broadcast intent information should be based on the commanded trajectory and not on the Flight Management System flight plan, to which the aircraft may not actually adhere. The use of priority flight rules had no effect on the percentage of the aircraft population meeting completely predictable which aircraft in a given pair would meet the constraints and which aircraft would make the first maneuver to yield right-of-way. Therefore, the proposed scheme for implementing priority flight rules through staggering the alerting time between the two aircraft was completely effective. The data and observations from this experiment, together with results from the previously reported study, support the feasibility of autonomous aircraft operations.

Wing, David J.↗

NASA NTRS1992

Acquisition and use of Orlando, Florida and Continental Airbus radar flight test data

Westinghouse is developing a lookdown pulse Doppler radar for production as the sensor and processor of a forward looking hazardous windshear detection and avoidance system. A data collection prototype of that product was ready for flight testing in Orlando to encounter low level windshear in corroboration with the FAA-Terminal Doppler Weather Radar (TDWR). Airborne real-time processing and display of the hazard factor were demonstrated with TDWR facilitated intercepts and penetrations of over 80 microbursts in a three day period, including microbursts with hazard factors in excess of .16 (with 500 ft. PIREP altitude loss) and the hazard factor display at 6 n.mi. of a visually transparent ('dry') microburst with TDWR corroborated outflow reflectivities of +5 dBz. Range gated Doppler spectrum data was recorded for subsequent development and refinement of hazard factor detection and urban clutter rejection algorithms. Following Orlando, the data collection radar was supplemental type certified for in revenue service on a Continental Airlines Airbus in an automatic and non-interferring basis with its ARINC 708 radar to allow Westinghouse to confirm its understanding of commercial aircraft installation, interface realities, and urban airport clutter. A number of software upgrades, all of which were verified at the Receiver-Transmitter-Processor (RTP) hardware bench with Orlando microburst data to produce desired advanced warning hazard factor detection, included some preliminary loads with automatic (sliding window average hazard factor) detection and annunciation recording. The current (14-APR-92) configured software is free from false and/or nuisance alerts (CAUTIONS, WARNINGS, etc.) for all take-off and landing approaches, under 2500 ft. altitude to weight-on-wheels, into all encountered airports, including Newark (NJ), LAX, Denver, Houston, Cleveland, etc. Using the Orlando data collected on hazardous microbursts, Westinghouse has developed a lookdown pulse Doppler radar product with signal and data processing algorithms which detect realistic microburst hazards and has demonstrated those algorithms produce no false alerts (or nuisance alerts) in urban airport ground moving vehicle (GMTI) and/or clutter environments.

Eide, Michael C.↗

NASA NTRS1939

Meteorological-physical Limitations of Icing in the Atmosphere

The icing hazard can, in most cases, be avoided by correct execution of the flights according to meteorological viewpoints and by meteorologically correct navigation (horizontal and, above all, vertical). The zones of icing hazard are usually narrowly confined. Their location can be ascertained with, in most cases, sufficient accuracy before take-off.

Findeisen, W↗

NASA NTRSDate not supplied

NASA and Blue Origin’s Flight Assessment of Precision Landing Algorithms Computing Performance

NASA’s Safe and Precise Landing - Integrated Capabilities Evolution (SPLICE) project continues NASA’s work in the development and testing of technologies for Precision Landing and Hazard Avoidance (PL&HA). This paper presents results characterizing how SPLICE flight software utilizes the shared computing resources of the Descent Landing Computer (DLC), one of the PL&HA technologies under development. The SPLICE technologies are being tested as an integrated payload on Blue Origin’s New Shepard suborbital vehicle. The results presented in this paper are measured by applications running in and with the flight software both in flight, and in a high-fidelity Hardware-in-the-Loop (HWIL) simulation environment. Linux utilities to measure performance are also executed from the command line in the HWIL configuration. Performance measurements of the SPLICE workloads executing on the DLC provide insight on how efficiently the software is utilizing the DLC resources. Examples of how these measurements have guided improvements in the flight code are presented. In addition, the DLC uses a commercial processor as a surrogate for NASA’s High-Performance Spaceflight Computing (HPSC) processor. This work provides insight on how an HPSC system may perform delivering PL&HA capabilities on a future mission. The measurements also can be used to infer architectural requirements for PL&HA capabilities, informing the HPSC project and other flight computer development efforts. Examples of the measurements collected include processor utilization, I/O bandwidth, cache and branch misses, and application profiles.

Precision Landing↗

NASA NTRS1958

Lightning Hazards to Aircraft Fuel Tanks

The hazards of lightning strokes to aircraft fuel tanks have been investigated in artificial-lightning-generation facilities specifically constructed to duplicate closely the natural lightning discharges to air craft determined through flight research programs and analysis of lightning-damaged aircraft over a period of many years. Explosion studies were made in an environmental explosion chamber using small fuel tanks under various simulated flight conditions. The results showed that there is a primary hazard whenever there is direct puncture of the fuel-tank wall, whereas the ignition of fuel by hot spots on tank walls due to lightning strikes is unlikely. Punctures of fuel-tank walls by artificial-lightning discharges produced explosions of the fuel in the mixture range from excessively lean to rich mixtures. None of the aluminum alloys, 0.081 inch thick or over, were punctured by the laboratory discharges representative of natural-lightning discharges to aircraft; however, reliance on this wall thickness for complete protection would not be justified, because occasional strokes are known to be of greater magnitude and because statistics reveal variations in the damage pattern. Data gathered by the Lightning and Transients Research Institute on lightning strokes to aircraft show that 90 percent of the strokes recorded have occurred in the temperature range of -10° to +10° C, where many of the jet fuels are flammable but where aviation gasoline is overrich. Also, 10 percent of the strokes recorded have been to the wings, which are the principal fuel-storage areas for modern aircraft. Thus, there is a hazard, particularly for jet fuels. Certain protective measures are indicated by the studies to date, such as the use of lightning diverter rods, thickening of the wing skin in areas near the most probable stroke paths, and the use of fuel-tank liners in critical areas.

Robb, J. D.↗

NASA NTRSDate not supplied

A High-Performance Computing GNSS-aware Path Planning Algorithm for Safe Urban Flight Operations

The emergence and development of advanced technologies and vehicle types have created a growing demand for new forms of flight operations. These new and increasingly complex operational paradigms, such as Advanced and Urban Air Mobility (AAM/UAM), present regulatory authorities and the aviation community with several design-and-implementation challenges – particularly for highly autonomous vehicles. An overarching and daunting task is to develop protocols that can integrate these operations without compromising safety or disrupting traditional airspace operations. A shift toward a more predictive, autonomous, risk mitigation capability becomes critical to meet this challenge. This paper proposes and evaluates a computationally-efficient path planning approach to perform pre-flight planning and autonomous in-flight re-routing to minimize exposures to selected hazards. In our evaluation, hazards associated with degraded and missing critical GPS navigation data are considered. In this paper, we first present a high-performance computing path planning approach based on an adapted Bellman-Ford algorithm, developed in the CUDA programming language. Using the adapted path planning algorithm, we test this algorithm when encountering issues with GPS quality, and deliver an implementation that can produce flight paths that minimize exposure to risks, while maintaining a low computational burden. In our evaluation, the computation of periodic and aperiodic path updates are evaluated, prioritizing specific events as triggers for updates, based on changes to satellite availability. These critical events can lead to significant exposure to navigational hazards if not dealt with correctly.

GNSS↗

NASA NTRSDate not supplied

A High-Performance Computing GNSS-aware Path Planning Algorithm for Safe Urban Flight Operations

The emergence and development of advanced technologies and vehicle types have created a growing demand for new forms of flight operations. These new and increasingly complex operational paradigms, such as Advanced and Urban Air Mobility (AAM/UAM), present regulatory authorities and the aviation community with several design-and-implementation challenges – particularly for highly autonomous vehicles. An overarching and daunting task is to develop protocols that can integrate these operations without compromising safety or disrupting traditional airspace operations. A shift toward a more predictive, autonomous, risk mitigation capability becomes critical to meet this challenge. This paper proposes and evaluates a computationally-efficient path planning approach to perform pre-flight planning and autonomous in-flight re-routing to minimize exposures to selected hazards. In our evaluation, hazards associated with degraded and missing critical GPS navigation data are considered. In this paper, we first present a high-performance computing path planning approach based on an adapted Bellman-Ford algorithm, developed in the CUDA programming language. Using the adapted path planning algorithm, we test this algorithm when encountering issues with GPS quality, and deliver an implementation that can produce flight paths that minimize exposure to risks, while maintaining a low computational burden. In our evaluation, the computation of periodic and aperiodic path updates are evaluated, prioritizing specific events as triggers for updates, based on changes to satellite availability. These critical events can lead to significant exposure to navigational hazards if not dealt with correctly.

GNSS↗

NASA NTRS2008

Joint Test Plan for Gas Dynamic Spray Technology Demonstration

Air Force Space Command (AFSPC) and NASA have similar missions, facilities, and structures located in similar harsh environments. Both are responsible for a number of facilities/structures with metallic structural and non-structural components in highly and moderately corrosive environments. Regardless of the corrosivity of the environment, all metals require periodic maintenance activity to guard against the insidious effects of corrosion and thus ensure that structures meet or exceed design or performance life. The standard practice for protecting metallic substrates in atmospheric environments is the use of an applied coating system. Current coating systems used across AFSPC and NASA contain volatile organic compounds (VOCs) and hazardous air pollutants (HAPs). These coatings are subject to environmental regulations at the Federal and State levels that limit their usage. In addition, these coatings often cannot withstand the high temperatures and exhaust that may be experienced by AFSPC and NASA structures. In response to these concerns, AFSPC and NASA have approved the use of thermal spray coatings (TSCs). Thermal spray coatings are extremely durable and environmentally friendly coating alternatives, but utilize large cumbersome equipment for application that make the coatings difficult and time consuming to repair. Other concerns include difficulties coating complex geometries and the cost of equipment, training, and materials. Gas Dynamic Spray (GDS) technology (also known as Cold Spray) will be evaluated as a smaller, more maneuverable repair method as well as for areas where thermal spray techniques are not as effective. The technology can result in reduced maintenance and thus reduced hazardous materials/wastes associated with current processes. Thermal spray and GDS coatings also have no VOCs and are environmentally preferable coatings. To achieve a condition suitable for the application of a coating system, including GDS coatings, the substrate must undergo some type of surface preparation and/or depainting operation to ensure adhesion of the new coating system. The GDS unit selected for demonstration has a powder feeding system that can be used for surface preparation or coating application. The surface preparation feature will also be examined. The primary objective of this effort is to demonstrate GDS technology as a repair method for TSCs. The project will also determine the optimal GDS coating thickness for acceptable performance. Successful completion of this project will result in approval of GDS technology as a repair method for TSCs at AFSPC and NASA installations and will improve corrosion protection at critical systems, facilitate easier maintenance activity, extend maintenance cycles, eliminate flight hardware contamination, and reduce the amount of hazardous waste generated.

Lewis, Pattie↗

NASA NTRS2013

Speech Recognition Interfaces Improve Flight Safety

"Alpha, Golf, November, Echo, Zulu." "Sierra, Alpha, Golf, Echo, Sierra." "Lima, Hotel, Yankee." It looks like some strange word game, but the combinations of words above actually communicate the first three points of a flight plan from Albany, New York to Florence, South Carolina. Spoken by air traffic controllers and pilots, the aviation industry s standard International Civil Aviation Organization phonetic alphabet uses words to represent letters. The first letter of each word in the series is combined to spell waypoints, or reference points, used in flight navigation. The first waypoint above is AGNEZ (alpha for A, golf for G, etc.). The second is SAGES, and the third is LHY. For pilots of general aviation aircraft, the traditional method of entering the letters of each waypoint into a GPS device is a time-consuming process. For each of the 16 waypoints required for the complete flight plan from Albany to Florence, the pilot uses a knob to scroll through each letter of the alphabet. It takes approximately 5 minutes of the pilot s focused attention to complete this particular plan. Entering such a long flight plan into a GPS can pose a safety hazard because it can take the pilot s attention from other critical tasks like scanning gauges or avoiding other aircraft. For more than five decades, NASA has supported research and development in aviation safety, including through its Vehicle Systems Safety Technology (VSST) program, which works to advance safer and more capable flight decks (cockpits) in aircraft. Randy Bailey, a lead aerospace engineer in the VSST program at Langley Research Center, says the technology in cockpits is directly related to flight safety. For example, "GPS navigation systems are wonderful as far as improving a pilot s ability to navigate, but if you can find ways to reduce the draw of the pilot s attention into the cockpit while using the GPS, it could potentially improve safety," he says.

Source record↗

NASA NTRS1992

Radiobiological studies with the nematode Caenorhabditis elegans. Genetic and developmental effects of high LET radiation

The biological effects of heavy charged particle (HZE) radiation are of particular interest to travellers and planners for long-duration space flights where exposure levels represent a potential health hazard. The unique feature of HZE radiation is the structured pattern of its energy deposition in targets. There are many consequences of this feature to biological endpoints when compared with effects of ionizing photons. Dose vs response and dose-rate kinetics may be modified, DNA and cellular repair systems may be altered in their abilities to cope with damage, and the qualitative features of damage may be unique for different ions. The nematode Caenorhabditis elegans is being used to address these and related questions associated with exposure to radiation. HZE-induced mutation, chromosome aberration, cell inactivation and altered organogenesis are discussed along with plans for radiobiological experiments in space.

short duration↗

NASA NTRS1988

Hazard index calculation for 31 May 1984 microburst at Erie, Colorado

Two x-band Doppler radars, operated by NOAA, were used to collect high resolution data within a small, benign looking microburst during the PHOENIX II boundary layer experiment. The lowest 2.5 km of the microbursts was observed throughout its development and dissipation over a 15 minute period. These observations presented an excellent opportunity to compute a quantitative threat to a hypothetical aircraft whose flight track would carry it through the microburst. The hazard index is based on the kinetic energy loss to the aircraft that would be produced by the microburst; it is a function of the vertical air motion, horizontal spatial derivatives of the wind field, and the assumed aircraft air speed and direction. Indices were computed and plotted for all 8 volume scans and peak values were observed to be sufficiently high to present a significant hazard to an aircraft.

Kropfli, R. A.↗

NASA NTRS1988

Final results of the NASA storm hazards program

Lightning swept-flash attachment patterns and the associated flight conditions were recorded from 1980-1986 during 1496 thunderstorm penetrations and 714 direct strikes with a NASA F-1068 research airplane. These data were studied with an emphasis on lightning avoidance by aircraft and on aircraft protection design. The individual lightning attachment spots, along with crew comments and on-board photographic data were used to identify lightning swept-flash attachment patterns and the orientations of the lightning channels with respect to the airplane. The full-scale in-flight data were compared to results from scale-model arc-attachment tests. The airborne and scale-model data showed that any exterior surface of this airplane may be susceptible to direct lightning attachment. In addition, the altitudes, ambient temperatures, and the relative turbulence and precipitation levels at which the strikes occurred in thunderstorms are summarized and discussed. It was found that the peak strike rate occurred at pressure altitudes betwen 38,000 ft and 40,000 ft, corresponding to ambient temperatures colder than -40 C.

Fisher, Bruce D.↗

NASA NTRS1993

Integrated display of multi-sensor geophysical and electromagnetic flight data

Low-altitude wind shear has been identified by several aviation interests as a significant hazard to the safety of flying. The hazard may be greatest when the wind shear is due to an unpredicted and short-lived microburst occurring in the immediate flight path of an aircraft during takeoff or landing. Researchers from the NASA Langley Research Center have investigated wind shear by developing a suite of remote sensing instruments and then using these instruments in an airborne wind shear detection flight program. Among these instruments were a Doppler radar, a lidar, and an infrared sensor; these were supported by in situ measurements of aircraft and environmental parameters and by ground-based Doppler radars. The basic problem addressed was the airborne detection and measurement of meteorologically-induced wind shear sufficiently ahead of the aircraft to allow avoidance. If the remote measurements of the shear and its associated radar reflectivity did not exceed set limits, the airplane then continued through the wind shear so that in situ measurements could be made for comparison. Initial detection and vectoring to the wind shear was normally given from a ground-based Doppler weather radar and most of the wind shear events were due to microbursts, both wet and dry. This paper considers the problems of sampling the wind shear event, time and space registration among the various sensors, coordination of the various sensors' beams and sampling volumes, and also various techniques for portraying the data, both for research and for presentation. Examples are given based on data from the 1991 and 1992 NASA/FAA wind shear flights, and the results and conclusions are generalized to other flight experiments involving multi-sensor electromagnetic data sets.

Delnore, V. E.↗

NASA NTRS2005

Field Evaluations Test Plan for Validation of Alternative Low-Emission Surface Preparation/Depainting Technologies for Structural Steel

Headquarters National Aeronautics and Space Administration (NASA) chartered the Acquisition Pollution Prevention (AP2) Office to coordinate agency activities affecting pollution prevention issues identified during system and component acquisition and sustainment processes. The primary objectives of the AP2 Office are to: (1) Reduce or eliminate the use of hazardous materials (HazMats) or hazardous processes at manufacturing, remanufacturing, and sustainment locations. (2) Avoid duplication of effort in actions required to reduce or eliminate HazMats through joint center cooperation and technology sharing. To achieve a substrate condition suitable for the application of a coating system, both new and old (in-situ) substrates must undergo some type of surface preparation and/or depainting operation to ensure adhesion of the new coating system. The level of cleanliness or anchor profile desired is typically a function of the type of coating to be applied and the specification being adhered to. In high performance environments, cleanliness and surface profile requirements for carbon steel (the dominant substrate for facilities, structures and equipment) dictates the use of abrasive media. Many of the abrasive media currently used across NASA and Air Force Space Command (AFSPC) installations generate large quantities of fugitive particulate emissions and waste. The high quantities of airborne dust and waste generated from these operations pose significant environmental concern. Efforts to contain emissions and the reduce quantity of waste generated have significant implications on project cost; this is often a deterrent to engaging in maintenance activities. In response to recent technological developments and NASA's and AFSPC's need to undertake environmentally conscious corrosion prevention projects, a review of the industry needs to be undertaken to evaluate surface preparation technologies (materials and processes) for embrace. This project will identify, evaluate and approve alternative surface preparation technologies for use at NASA and AFSPC installations. Materials and processes will be evaluated with the goal of selecting those processes that will improve corrosion protection at critical systems, facilitate easier maintenance activity, extend maintenance cycles, eliminate flight hardware contamination and reduce the amount of hazardous waste generated. This Field Evaluations Test Plan defines the field evaluation and testing requirements for validating alternative surface preparation/depainting technologies and supplements the JTP. The field evaluations will be performed at Stennis Space Center, Mississippi, under the oversight of the Project Engineer. Additional field evaluations may be performed at other NASA centers or AFSPC facilities.

Lewis, Pattie↗

NASA NTRS1990

Reproduction in the space environment: Part II. Concerns for human reproduction

Long-duration space flight and eventual colonization of our solar system will require successful control of reproductive function and a thorough understanding of factors unique to space flight and their impact on gynecologic and obstetric parameters. Part II of this paper examines the specific environmental factors associated with space flight and the implications for human reproduction. Space environmental hazards discussed include radiation, alteration in atmospheric pressure and breathing gas partial pressures, prolonged toxicological exposure, and microgravity. The effects of countermeasures necessary to reduce cardiovascular deconditioning, calcium loss, muscle wasting, and neurovestibular problems are also considered. In addition, the impact of microgravity on male fertility and gamete quality is explored. Due to current constraints, human pregnancy is now contraindicated for space flight. However, a program to explore effective countermeasures to current constraints and develop the required health care delivery capability for extended-duration space flight is suggested. A program of Earth- and space-based research to provide further answers to reproductive questions is suggested.

Review, Tutorial↗

NASA NTRS2010

The Role and Quality of Software Safety in the NASA Constellation Program

In this study, we examine software safety risk in the early design phase of the NASA Constellation spaceflight program. Obtaining an accurate, program-wide picture of software safety risk is difficult across multiple, independently-developing systems. We leverage one source of safety information, hazard analysis, to provide NASA quality assurance managers with information regarding the ongoing state of software safety across the program. The goal of this research is two-fold: 1) to quantify the relative importance of software with respect to system safety; and 2) to quantify the level of risk presented by software in the hazard analysis. We examined 154 hazard reports created during the preliminary design phase of three major flight hardware systems within the Constellation program. To quantify the importance of software, we collected metrics based on the number of software-related causes and controls of hazardous conditions. To quantify the level of risk presented by software, we created a metric scheme to measure the specificity of these software causes. We found that from 49-70% of hazardous conditions in the three systems could be caused by software or software was involved in the prevention of the hazardous condition. We also found that 12-17% of the 2013 hazard causes involved software, and that 23-29% of all causes had a software control. Furthermore, 10-12% of all controls were software-based. There is potential for inaccuracy in these counts, however, as software causes are not consistently scoped, and the presence of software in a cause or control is not always clear. The application of our software specificity metrics also identified risks in the hazard reporting process. In particular, we found a number of traceability risks in the hazard reports may impede verification of software and system safety.

Layman, Lucas↗