Development of a Dynamic Event Tree Branching Methodology to Integrate Safety and Security Analyses.
Abstract not provided.
Cohn, Brian↗
SEARCH · Search NASA
Results for “Dynamic Event Tree”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Next Generation Severe Accident and Dynamic Event Tree Modeling.
Abstract not provided.
Haskin, Troy Christopher↗
Development of a Dynamic Event Tree Branching Methodology to Integrate Safety and Security Analyses.
Abstract not provided.
Cohn, Brian↗
Preliminary Cyber-Informed Dynamic Branch Conditions for Analysis with the Dynamic Simplified Cyber MELCOR Model
Instrumentation and control of nuclear power is transforming from analog to modern digital assets. These control systems perform key safety and security functions. This transformation is occurring in new plant designs as well as in the existing fleet of plants as the operation of those plants is extended to 60 years. This transformation introduces new and unknown exploits involving both digital asset induced safety issues and security exploits. Traditional the open literature of nuclear power risk assessment tools and cyber security assessment methods have not been modified or developed to address the unique nature of cyber failure modes and of cyber security threats. Starting in 2015, Sandia National Laboratories (SNL) embarked on a two year dynamic cyber-risk informed project to facilitate the analysis of unique cyber failure modes and the time sequencing of cyber faults, both malicious and non-malicious, and impose those cyber exploits and cyber faults onto a nuclear power plant accident sequence simulator code to assess how cyber exploits and cyber faults could interact with a plant's digital instrumentation and control (DI and C) system in the absence of digital controls. This will be achieved by coupling SNL's existing dynamic scheduler code (ADAPT), nuclear accident simulator code (MELCOR), and cyber Emulytics code (SCEPTRE) to demonstrate real-time simulation of cyber exploits and their impact on automatic DI and C responses. Studying such potential time-sequenced cyber-attacks and their risks (i.e., the associated impact and the associated degree of difficulty to achieve the attack vector) as they pertain to accident management will provide a risk informed basis for developing effective cyber security controls for nuclear power. This paper will discuss the rationale behind the proposed generic cyber exploits for an abstracted Pressurized Water Reactor that has adopted a unified DI and C System. Other papers related to this project submitted to this conference discuss: - The MELCOR model for this abstracted reactor, called the Dynamic Simplified Cyber (DSC) model, - Modifications to ADAPT to: Extend the framework for multiple simulators, Incorporation of importance measures into dynamic event tree analysis, Sort and reduce the dynamic event tree based upon inputs to or outputs from the tree, and - A feasibility study for using density based clustering methods with dynamic time wrapping to cluster and prune dynamic event trees. (authors)
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Dynamic Importance Measures in the ADAPT Framework
Probabilistic Risk Assessment (PRA) uses fault tree/event tree analysis to evaluate the environmental impacts of nuclear power plants due to internal or external initiating events. In a fault tree, basic failure events are assembled using primarily And/Or logic to determine the combinations of failures that lead to failure of the system as a whole. An event tree is forward-facing, and begins with a single initiating event. From there the analysis considers what event may occur next, and branches out among the possible configurations of occurrence and non-occurrence of that event. This branching continues until user-defined end states are reached. End states may include a safe and stable configuration of the plant, or any number of differing failure states. Both fault and event trees require basic event probabilities as inputs to provide insight on the likelihood of different outcomes. PRA has been applied to nuclear power plants as an analysis tool since the 1975 Reactor Safety Study. In a traditional PRA, the order of events is prescribed by the analyst and each event is typically a binary aleatory uncertainty: occurrence or non-occurrence. Discrete dynamic event tree (DDET) analysis eliminates this subjectivity in ordering of events by using the output of a dynamic system model (simulator) to inform the branching. Branching conditions are triggered by the existence of a relevant plant state in the code, and therefore only occur as physically appropriate. The DDET approach also allows consideration of both epistemic and aleatory uncertainties on a phenomenologically and stochastically consistent platform. One current limitation of DDETs is the assessment of results, which is not as well developed as in traditional PRA. A concept that is used in PRA to assess the significance of a basic event is the concept of importance measures (IMs). In traditional PRA, IMs only consider the likelihood of occurrence of non-occurrence of a basic event. The application of importance measures to DDETs must take into consideration not only the occurrence and non-occurrence of an event, but also uncertain timing or severity. This work describes three general dynamic importance measures (DIMs) as implemented in the Analysis of Dynamic Accident Progression Trees (ADAPT) DDET driver code. The measures account for the change in progression of the DDET resulting from the different values of each uncertain variable under investigation. The DIMs are applied to a sample DDET to demonstrate the type of insights that may be gained from each one. These measures will facilitate comparison of the impact of dynamic branching events on a consequence of interest, which also allow DDETs to be used in prioritizing plant investments. (authors)
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
A Passive System Reliability Analysis for a Station Blackout
The latest iterations of advanced reactor designs have included increased reliance on passive safety systems to maintain plant integrity during unplanned sequences. While these systems are advantageous in reducing the reliance on human intervention and availability of power, the phenomenological foundations on which these systems are built require a novel approach to a reliability assessment. Passive systems possess the unique ability to fail functionally without failing physically, a result of their explicit dependency on existing boundary conditions that drive their operating mode and capacity. Argonne National Laboratory is performing ongoing analyses that demonstrate various methodologies for the characterization of passive system reliability within a probabilistic framework. Two reliability analysis techniques are utilized in this work. The first approach, the Reliability Method for Passive Systems, provides a mechanistic technique employing deterministic models and conventional static event trees. The second approach, a simulation-based technique, utilizes discrete dynamic event trees to treat time- dependent phenomena during scenario evolution. For this demonstration analysis, both reliability assessment techniques are used to analyze an extended station blackout in a pool-type sodium fast reactor (SFR) coupled with a reactor cavity cooling system (RCCS). This work demonstrates the entire process of a passive system reliability analysis, including identification of important parameters and failure metrics, treatment of uncertainties and analysis of results.
Brunett, Acacia↗
Conditional Tree Reduction in the ADAPT Framework
Probabilistic Risk Assessment (PRA) uses fault tree/event tree analysis to evaluate the environmental impacts of nuclear power plants due to internal or external initiating events. In a fault tree, basic failure events are assembled using primarily And/Or logic to determine the combinations of failures that lead to failure of the system as a whole. An event tree is forward-facing, and begins with a single initiating event. From there the analysis considers what event may occur next, and branches out among the possible configurations of occurrence and non-occurrence of that event. This branching continues until end states are reached. End states may include a safe and stable configuration of the plant, or any number of differing failure states. Both fault and event trees require basic event probabilities as inputs to provide insight on the likelihood of different outcomes. PRA has been applied to nuclear power plants as an analysis tool since the 1975 Reactor Safety Study. In a traditional PRA, the order of events is prescribed by the analyst and each event is typically a binary aleatory uncertainty: occurrence or non-occurrence. Discrete dynamic event tree (DDET) analysis eliminates this subjectivity in ordering of events by using the output of a dynamic system model (simulator) to inform the branching. Branching conditions are triggered by the existence of a relevant plant state in the code, and therefore only occur as physically appropriate. The DDET approach also allows consideration of both epistemic and aleatory uncertainties on a phenomenologically and stochastically consistent platform. A DDET may be orders of magnitude larger than a traditional event tree for the same initiating event, as more of the uncertainty space is likely to be explored and the tree does not require manual assembly. Because of the size, manual inspection of the entire DDET is often infeasible. This problem may be approached from the front by reducing the number of sampled branching values or by online pruning of the tree, thus reducing the total number of branches. Utilizing post-processing techniques to draw actionable insights via clustering has also been proposed. One post-processing tool to reduce the DDET according to user-defined rules has been recently implemented in the Analysis of Dynamic Accident Progression Trees (ADAPT) DDET driver code. The tool creates a 'slice' of the DDET comprised of the set of branches that meet a set of user-input rules, for immediate visualization or for further calculations conditional on the rules being met. This extension is expected to ease analysis of the results of large and complex DDETs, leading to greater applicability of DDETs in PRA. It should be emphasized that this tool is a visualization aide and does not impact the theoretical basis of the DDET approach. (authors)
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Extension of the ADAPT Framework for Multiple Simulators
Probabilistic Risk Assessment (PRA) uses fault tree/event tree analysis to evaluate the environmental impacts of nuclear power plants due to internal or external initiating events. In a fault tree, basic failure events are assembled using primarily And/Or logic to determine the combinations of failures that lead to failure of the system as a whole. An event tree is forward-facing, and begins with a single initiating event. From there the analysis considers what event may occur next, and branches out among the possible configurations of occurrence and non-occurrence of that event. This branching continues until end states are reached. End states may include a safe and stable configuration of the plant, or any number of differing failure states. Both fault and event trees require basic event probabilities as inputs to provide insight on the likelihood of different outcomes. PRA has been applied to nuclear power plants as an analysis tool since the 1975 Reactor Safety Study. In a traditional PRA, the order of events is prescribed by the analyst and each event is typically a binary aleatory uncertainty: occurrence or non-occurrence. Discrete dynamic event tree (DDET) analysis eliminates this subjectivity in ordering of events by using the output of a dynamic system model (simulator) to inform the branching. Branching conditions are triggered by the existence of a relevant plant state in the code, and therefore only occur as physically appropriate. The DDET approach also allows consideration of both epistemic and aleatory uncertainties on a phenomenologically and stochastically consistent platform. One limitation of the DDET driver codes developed to date (namely ADAPT, ADS, and MCDET ) is that the tree is driven by a single simulator. The goal of this work is a general multi-simulator driver. This limits the parameter space that may be explored in a single DDET to that which may be covered by a single simulator. In this work, the Analysis of Dynamic Accident Progression Trees (ADAPT) code is extended to support multiple arbitrary simulators. This capability will increase the depth and breadth of phenomena that may be analyzed in a single DDET. For example, a large-scale system code may pass the analysis to a more detailed code if certain conditions are met, in order to capture relevant phenomena that would be lost if only the system code were to be used. In addition, the time required to cover a given uncertainty space may be reduced by dynamically identifying and running only the situations that are appropriate given the plant conditions in each simulator. The use of multiple simulators is expected to further reduce subjectivity in PRA by enabling high fidelity modeling of reality. (authors)
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
ADAPT
The purpose of the ADAPT code is to generate Dynamic Event Trees (DET) using a user specified set of simulators. ADAPT can utilize any simulation tool which meets a minimal set of requirements. ADAPT is based on the concept of DET which uses explicit modeling of the deterministic dynamic processes that take place during a nuclear reactor plant system (or other complex system) evolution along with stochastic modeling. When DET are used to model various aspects of Probabilistic Risk Assessment (PRA), all accident progression scenarios starting from an initiating event are considered simultaneously. The DET branching occurs at user specified times and/or when an action is required by the system and/or the operator. These outcomes then decide how the dynamic system variables will evolve in time for each DET branch. Since two different outcomes at a DET branching may lead to completely different paths for system evolution, the next branching for these paths may occur not only at separate times, but can be based on different branching criteria. The computational infrastructure allows for flexibility in ADAPT to link with different system simulation codes, parallel processing of the scenarios under consideration, on-line scenario management (initiation as well as termination), analysis of results, and user friendly graphical capabilities. The ADAPT system is designed for a distributed computing environment; the scheduler can track multiple concurrent branches simultaneously. The scheduler is modularized so that the DET branching strategy can be modified (e.g. biasing towards the worst-case scenario/event). Independent database systems store data from the simulation tasks and the DET structure so that the event tree can be constructed and analyzed later. ADAPT is provided with a user-friendly client which can easily sort through and display the results of an experiment, precluding the need for the user to manually inspect individual simulator runs.
Reynolds, John↗
Branch-and-Bound algorithm applied to uncertainty quantification of a Boiling Water Reactor Station Blackout
Evaluation of the impacts of uncertainty and sensitivity in modeling presents a significant set of challenges in particular to high fidelity modeling. Computational costs and validation of models creates a need for cost effective decision making with regards to experiment design. Experiments designed to validate computation models can be used to reduce uncertainty in the physical model. In some cases, large uncertainty in a particular aspect of the model may or may not have a large impact on the final results. For example, modeling of a relief valve may result in large uncertainty, however, the actual effects on final peak clad temperature in a reactor transient may be small and the large uncertainty with respect to valve modeling may be considered acceptable. Additionally, the ability to determine the adequacy of a model and the validation supporting it should be considered within a risk informed framework. Low fidelity modeling with large uncertainty may be considered adequate if the uncertainty is considered acceptable with respect to risk. In other words, models that are used to evaluate the probability of failure should be evaluated more rigorously with the intent of increasing safety margin. Probabilistic risk assessment (PRA) techniques have traditionally been used to identify accident conditions and transients. Traditional classical event tree methods utilize analysts’ knowledge and experience to identify the important timing of events in coordination with thermal-hydraulic modeling. These methods lack the capability to evaluate complex dynamic systems. In these systems, time and energy scales associated with transient events may vary as a function of transition times and energies to arrive at a different physical state. Dynamic PRA (DPRA) methods provide a more rigorous analysis of complex dynamic systems. Unfortunately DPRA methods introduce issues associated with combinatorial explosion of states. This study presents a methodology to address combinatorial explosion using a Branch-and-Bound algorithm applied to Dynamic Event Trees (DET), which utilize LENDIT (L – Length, E – Energy, N – Number, D – Distribution, I – Information, and T – Time) as well as a set theory to describe system, state, resource, and response (S2R2) sets to create bounding functions for the DET. The optimization of the DET in identifying high probability failure branches is extended to create a Phenomenological Identification and Ranking Table (PIRT) methodology to evaluate modeling parameters important to safety of those failure branches that have a high probability of failure. The PIRT can then be used as a tool to identify and evaluate the need for experimental validation of models that have the potential to reduce risk. Finally, in order to demonstrate this methodology, a Boiling Water Reactor (BWR) Station Blackout (SBO) case study is presented.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Nuclear safety Enhanced: A Deep dive into current and future RAVEN applications
As the horizon of nuclear energy expands with the advent of small modular reactors, IV generation reactors, and fusion reactors, there is a growing perspective that the licensing process could benefit from a more comprehensive approach. Moving beyond traditional deterministic and PRA analysis might pave the way for a novel safety analysis paradigm propelled by the increasing computational power at our disposal. This paper explores different methodologies that can improve the outcomes of nuclear safety analysis. These range from uncertainty quantification techniques, aimed at enhancing the precision of safety margins, to deploying dynamic event trees by driving system code simulations, capturing the potential evolutions of severe accidents. These methodologies introduce innovative dimensions to safety analysis, considering the consequences of postulated events and the dynamics of accident sequences. However, they also bring forth challenges, especially in managing the complexity and sheer volume of potential scenarios. The paper touches upon some strategies to counter these challenges, emphasizing the importance of adaptability and continuous evolution in the face of emerging nuclear safety concerns. Additionally, the paper sheds light on the need for advanced tools to apply these methodologies. Among these tools is RAVEN, an open-source software designed for parametric and probabilistic analyses. Its core components, including distribution, sampler, and reduced order model, enable various applications, from risk assessment and mitigation to dynamic learning and plant control logic simulations.
97 - MATHEMATICS AND COMPUTING↗
Dynamic PRA Methods to Evaluate the Impact on Accident Progression of Accident Tolerant Fuels
Accident tolerant fuels (ATFs) are new nuclear fuels developed in response to the accident at the Fukushima power station in March 2011. The goal of ATFs is to withstand accident scenarios through better performance compared to currently employed fuels (e.g., small-scale hydrogen generation). This paper targets a method for evaluating and comparing ATF performance from a probabilistic risk assessment (PRA) perspective by employing a newly developed combination of event trees and dynamic PRA methods. Compared to classical PRA methods based on event trees and fault trees, dynamic PRA can evaluate with higher resolution the safety impacts of physics dynamics and the timing/sequencing of events on the accident progression without the need to introduce overly conservative modeling assumptions and success criteria. In this paper, we analyze the impact on the accident progression of three different cladding configurations for two initiating events [a large break loss-of-coolant accident (LB-LOCA) and a station blackout (SBO)] by employing dynamic PRA methods. The goal is to compare the safety performance of ATFs (FeCrAl and Cr-coated cladding) and the currently employed Zr-based clad fuel. We employ two different strategies. The first focuses on the identification of success criteria discrepancies between the accident sequences generated by the classical PRA model and the set of simulation runs generated by dynamic PRA using ATF. The second one, on the other hand, directly uses dynamic PRA to evaluate the impact of timing of events (e.g., recovery actions) on accident progression. In conclusion, by applying these methods to the LB-LOCA and SBO initiating events, we show how dynamic PRA methods can provide analysts with detailed and quantitative information on the safety impact of ATFs.
97 - MATHEMATICS AND COMPUTING↗
How to ADAPT
The ADAPT software allows for the examination of aleatory and epistemic uncertainties in complex system transients using the Dynamic Event Tree (DET) methodology. This manual outlines the principles of operation of ADAPT and provides directions for its use. Future plans for the code are briefly outlined.
97 MATHEMATICS AND COMPUTING↗
Dynamic, risk informed decision support systems and methods
The present disclosure is directed to a decision support system or tool based on a Bayesian Network (BN) framework. The diagnostic support tool is created by using advanced Probabilistic Risk Assessment (PRA) method(s) to construct Bayesian Networks (BNs) that form a Bayesian Decision Support Process (BDSP) to provide science-based decision support for understanding and managing events in complex systems. In an embodiment, the PRA method(s) may include Discrete Dynamic Event Trees (DDETs) and simulations.
Groth, Katrina↗
A combined strategy for dynamic probabilistic risk assessment of fission battery designs using EMRALD and DEPM
Not Available
97 MATHEMATICS AND COMPUTING↗
Investigation of the Use of Dynamic Probabilistic Risk Assessment Methodologies for Identifying Digital I&C System Common Cause Failures
Digital Instrumentation and Control (I&C) systems have a key role in nuclear power plants in the upgrade of aging analog systems. Digital systems improve plant safety and reliability through features such as increased hardware reliability and stability and improved failure detection capability. There is no consensus on which of the current probabilistic risk assessment methods are most suitable for use in the reliability analysis of digital I&C systems. While the traditional event-tree/fault-tree (ET/FT) approach is still used for their reliability modeling, there are concerns regarding this approach in properly accounting for dynamic interactions among system components since potentially significant dependencies among failure events may not be identified and/or their likelihood may not be properly quantified. Dynamic methodologies are expected to provide a much more accurate representation of probabilistic evolution of the I&C systems in time due to their capability to more properly account for complex interactions than the static approach. The applicability of dynamic PRA methodologies for digital I&C system is investigated using the criteria presented in the NUREG/CR-6901, and the comparisons made in NUREG/CR-6901 are updated in light of the latest studies. The Dynamic Event Tree (DET) approach has been identified as one of the top dynamic methods when evaluated against the requirements for the reliability modeling of digital I&C systems. The DET method is a strong candidate for integration into existing PRA studies, as it bears many similarities to the traditional ET approach. In this study, the DET approach has been applied to the Plant Protection System of the APR1400 design, and the results are compared to results from its available traditional ET/FT analysis. Possible approaches to evaluate and quantify the effects of common cause failures on system safety using dynamic methods are also examined.
46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗
Dynamic Probabilistic Safety Assessment Studies for Advanced Reactor Using RAVEN
Probabilistic Safety Assessment (PSA) is used extensively to evaluate the risks associated with complex engineering systems like Nuclear Power Plants (NPPs). Current PSA models are based on the Event-Tree/Fault-Tree (ET/FT) methodology. ET and FT models are static and are based on Boolean logic approaches. In the past, concerns have been raised in the literature regarding the capability of the traditional static modelling approaches to adequately account for the impact of process, hardware, software, firmware and human interactions on the stochastic system behaviour. To overcome the limitations of the traditional approach to PSA, several dynamic PSA methodologies have been proposed. One of the dynamic PSA methodologies used for dynamic evaluations is Dynamic Event Tree (DET) framework which can be used to assess the impact of the parameter variability and scenario dynamics on the PSA model for the initiating event. The DET framework couples the stochastic model (number of component/trains that start on demand, operator action timing, etc.) with a Thermal-Hydraulic (TH) model of the plant. This paper explores the use of DET along with a case study on advanced reactor. The initiating event selected for the study was Class IV power supply failure event. The TH analysis considering uncertainty in various parameters was performed using RELAP5 and Reactor Analysis and Virtual control ENvironment (RAVEN) tool. Based on the uncertainty analysis, it is concluded that the peak clad temperatures (PCT) are within the limits in all the code runs implying a high-degree of safety margin. However, variation in time to reach the PCT was observed among the code runs and the mean time to reach the PCT was found to be around 8590sec (approximately 2.4 hours). Hence, sufficient time margin is available for human intervention and the operator might have a relatively stress-free state during such an accident scenario. Due to the static nature of the traditional PSA models, the safety margin available was lesser, whereas, with the help of dynamic PSA models, one can demonstrate that the actual available safety margin is more in the present case study and is valuable input from the design point of view.
99 GENERAL AND MISCELLANEOUS↗
Linking classical PRA models to a dynamic PRA
Here, this paper presents a series of methods designed to incorporate classical Probabilistic Risk Assessment (PRA) models such as Event Trees (ETs) and Fault Trees (FTs) into dynamic PRA. In contrast to classical PRA, dynamic PRA couples stochastic methods with system simulators to determine the risks associated with complex systems such as nuclear power plants. Compared with classical PRA methods, they can evaluate with higher resolution the safety impact of timing and sequencing of events on the progression of the accident. As part of a dynamic PRA analysis, it is not uncommon that parts of the system to be analyzed might not require a computationally expensive simulation model. These parts could be in fact modeled by employing classical PRA models (e.g., a FT). Here, we present a set of methods and tools that can be used to link the most common classical PRA models (ETs, FTs, reliability block diagrams and Markov models) to simulation codes such as RELAP5-3D: creating a “hybrid PRA.” In order to show the potential of such an hybrid PRA we employ this method to verify ET modeling assumptions (e.g., success criteria) using a large break loss of coolant accident initiating event as a test case. In this respect, we link a set of FTs from the original PRA to the RELAP5-3D code and perform a hybrid PRA. The FTs are employed to model the control logic of several safety systems and to propagate component failures throughout the system. Provided the generated dynamic PRA data, we show how conservative assumptions in the original PRA can be identified and how such original PRA can be modified by updating success criteria captured by the set of RELAP5-3D simulation runs.
97 - MATHEMATICS AND COMPUTING↗