SEARCH · Search NASA

Results for “value of resilience”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

All sources NASA NTRS DOE OSTI

NASA NTRS2024

The Economics of Farming Expansion in the Brazilian Cerrado Under Possible Effects of Climate Change

This analysis assesses the financial viability of legally investing in native Cerrado vegetation deforestation for crop production, considering climate change. The study uses data from twelve different crop models based on three different climate models to predict potential future crop yields in cleared land for growing soy and maize. The outcomes show that in many micro-regions, investments in clearing land for crop production would destroy economic value, that is, generate a negative net present value because of low/negative and volatile cashflows driven primarily by future yields as affected by climate. Our analysis was carried out based on present agricultural practices and technology. As climate changes, farmers may adapt their practices, which can lead to more resilient and productive crops, or grow different crops, which could provide better returns on investment in clearing land than the ones resulting from our analysis. Despite various uncertainties, farmers, policy makers and financial institutions should be aware of the climatic and financial risks associated with land clearing in Brazil, mainly in micro-regions in which all scenarios resulted in negative outcomes in the investment analysis.

agricultural expansion↗

NASA NTRS2009

Use of NASA Satellite Data in Aiding Mississippi Barrier Island Restoration Projects

This presentation discusses a NASA Stennis Space Center project in which NASA-supported satellite and aerial data is being used to aid state and federal agencies in restoring the Mississippi barrier islands. Led by the Applied Science and Technology Project Office (ASTPO), this project will produce geospatial information products from multiple NASA-supported data sources, including Landsat, ASTER, and MODIS satellite data as well as ATLAS multispectral, CAMS multispectral, AVIRIS hyperspectral, EAARL, and other aerial data. Project objectives include the development and testing of a regional sediment transport model and the monitoring of barrier island restoration efforts through remote sensing. Barrier islands provide invaluable benefits to the State of Mississippi, including buffering the mainland from storm surge impacts, providing habitats for valuable wildlife and fisheries habitat, offering accessible recreational opportunities, and preserving natural environments for educating the public about coastal ecosystems and cultural resources. Unfortunately, these highly valued natural areas are prone to damage from hurricanes. For example, Hurricane Camille in 1969 split Ship Island into East and West Ship Island. Hurricane Georges in 1998 caused additional land loss for the two Ship Islands. More recently, Hurricanes Ivan, Katrina, Rita, Gustav, and Ike impacted the Mississippi barrier islands. In particular, Hurricane Katrina caused major damage to island vegetation and landforms, killing island forest overstories, overwashing entire islands, and causing widespread erosion. In response, multiple state and federal agencies are working to restore damaged components of these barrier islands. Much of this work is being implemented through federally funded Coastal Impact Assessment and Mississippi Coastal Improvement programs. One restoration component involves the reestablishment of the island footprints to that in 1969. Our project will employ NASA remote sensing data and products to support these federally funded efforts on multiple fronts. Landsat and ASTER data is being analyzed to assess changes in barrier island land cover over the last 35 years. ASTER, SRTM, and EAARL terrain products and other NASA airborne imagery are being applied in assessing changes in barrier island geomorphology and geospatial extent. MODIS data is being examined as a tool for sediment transport modeling by supplying geospatial data that quantifies in-water sediment concentrations. MODIS satellite data is being assessed for monitoring changes in the spatial extent of individual barrier islands. Results thus far indicate that NASA data products are useful in assessing barrier island conditions and changes. This value is enhanced with additional historical geospatial data, commercial high resolution satellite data, other non-NASA aerial imagery, and field survey data. The project s products are relevant to the Gulf of Mexico Alliance priority issues, including coastal habitat conservation, restoration and coastal community resilience. Such products will be available to state and federal agencies involved with coastal restoration. Potential end-users of these products include the National Park Service, U.S. Geological Survey, U.S. Army Corps of Engineers, Environmental Protection Agency, Mississippi Department of Environmental Quality, and Mississippi Department of Marine Resources.

Giardino, Marco↗

NASA NTRS2018

Optimization of Second Fault Detection Thresholds to Maximize Mission Probability of Success

In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. The SLS program has also levied requirements relating to the capability of the Inertial Navigation System to detect a second fault. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error due to sensor faults in a purely inertial system can drive the vehicle outside of its operational as-designed environmental and performance envelope. As this performance outside of first fault detections is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design. A top-down approach is utilized to assess vehicle sensitivity to second sensor faults. A wide range of failure scenarios in terms of both fault magnitude and time is used for assessment. The approach also utilizes a schedule to change fault detection thresholds autonomously. These individual values are optimized along a nominal trajectory in order to maximize probability of mission success in terms of system-level insertion requirements while minimizing the probability of false positives. This paper will describe an approach integrating Genetic Algorithms and Monte Carlo analysis to tune the threshold parameters to maximize vehicle resilience to second fault events over an ascent mission profile. The analysis approach and performance assessment and verification will be presented to demonstrate the applicability of this approach to second fault detection optimization to maximize mission probability of success through taking advantage of existing margin.

Anzalone, Evan J.↗

NASA NTRS2009

Mitigation of EMU Cut Glove Hazard from Micrometeoroid and Orbital Debris Impacts on ISS Handrails

Recent cut damages sustained on crewmember gloves during extravehicular activity (ISS) onboard the International Space Station (ISS) have been caused by contact with sharp edges or a pinch point according to analysis of the damages. One potential source are protruding sharp edged crater lips from micrometeoroid and orbital debris (MMOD) impacts on metallic handrails along EVA translation paths. A number of hypervelocity impact tests were performed on ISS handrails, and found that mm-sized projectiles were capable of inducing crater lip heights two orders of magnitude above the minimum value for glove abrasion concerns. Two techniques were evaluated for mitigating the cut glove hazard of MMOD impacts on ISS handrails: flexible overwraps which act to limit contact between crewmember gloves and impact sites, and; alternate materials which form less hazardous impact crater profiles. In parallel with redesign efforts to increase the cut resilience of EMU gloves, the modifications to ISS handrails evaluated in this study provide the means to significantly reduce cut glove risk from MMOD impact craters

Ryan, Shannon↗

NASA NTRS2016

Disturbance and the Carbon Balance of US Forests: A Quantitative Review of Impacts from Harvests, Fires, Insects, and Droughts

Disturbances are a major determinant of forest carbon stocks and uptake. They generally reduce land carbon stocks but also initiate a regrowth legacy that contributes substantially to the contemporary rate of carbon stock increase in US forestlands. As managers and policy makers increasingly look to forests for climate protection and mitigation, and because of increasing concern about changes in disturbance intensity and frequency, there is a need for synthesis and integration of current understanding about the role of disturbances and other processes in governing forest carbon cycle dynamics, and the likely future of this and other sinks for atmospheric carbon. This paper aims to address that need by providing a quantitative review of the distribution, extent and carbon impacts of the major disturbances active in the US. We also review recent trends in disturbances, climate, and other global environmental changes and consider their individual and collective contributions to the US carbon budget now and in the likely future. Lastly, we identify some key challenges and opportunities for future research needed to improve current understanding, advance predictive capabilities, and inform forest management in the face of these pressures. Harvest is found to be the most extensive disturbance both in terms of area and carbon impacts, followed by fire, windthrow and bark beetles, and lastly droughts. Collectively these lead to the gross loss of about 200 Tg C y(exp -1) in live biomass annually across the conterminous US. At the same time, the net change in forest carbon stocks is positive (190 Tg C y(exp -1)), indicating not only forest resilience but also an apparently large response to growth enhancements such as fertilization by CO2 and nitrogen. Uncertainty about disturbance legacies, disturbance interactions, likely trends, and global change factors make the future of the US forest carbon sink unclear. While there is scope for management to enhance carbon sinks in US forests, tradeoffs with other values and uses are likely to significantly limit practical implementation. Continued and expanded remote sensing and field-based monitoring capabilities and manipulative experimentation are needed to improve understanding of the US forest carbon sink, and assess how disturbance processes are responding to the pressures of global environmental change. In addition, continued development and application of holistic, decision support tools that consider a range of forest values are needed to enable managers and policy makers to use the best available information for guiding forest resources now and into the future.

Williams, Christopher A.↗

NASA NTRS1981

Formulation and characterization of polyimide resilient foams of various densities for aircraft seating applications

Light weight, heat and fire resistant low smoke generating polyimide foams are developed for aircraft seating applications. The material is upgraded and classified into groups for fabrication of cushions possessing acceptable comfort properties. Refinement and selection of foaming processes using a variety of previously developd foaming techniques and definition of property relationships to arrive at the selection and classfication of polyimide foams into five groups in accordance with predetermined ILD values are emphasized.

Gagliani, J.↗

NASA NTRS2024

Synthesis Report of the IPCC Sixth Assessment Report (AR6)

This Synthesis Report (SYR) of the IPCC Sixth Assessment Report (AR6) summarises the state of knowledge of climate change, its widespread impacts and risks, and climate change mitigation and adaptation, based on the peer-reviewed scientific, technical and socio-economic literature since the publication of the IPCC’s Fifth Assessment Report (AR5) in 2014. he assessment is undertaken within the context of the evolving international landscape, in particular, developments in the UN Framework Convention on Climate Change (UNFCCC) process, including the outcomes of the Kyoto Protocol and the adoption of the Paris Agreement. It reflects the increasing diversity of those involved in climate action. This report integrates the main findings of the AR6 Working Group reports and the three AR6 Special Reports. It recognizes the interdependence of climate, ecosystems and biodiversity, and human societies; the value of diverse forms of knowledge; and the close linkages between climate change adaptation, mitigation, ecosystem health, human well-being and sustainable development. Building on multiple analytical frameworks, including those from the physical and social sciences, this report identifies opportunities for transformative action which are effective, feasible, just and equitable using concepts of systems transitions and resilient development pathways. Different regional classification schemes4 are used for physical, social and economic aspects, reflecting the underlying literature.

climate impacts↗

NASA NTRS2021

Importance of Trade Dependencies for Agricultural Inputs: A Case Study of Finland

Approximately 80% of the world's population lives in countries that are dependent on food imports to sustain an adequate food supply. Besides these food imports, further dependencies also arise due to the requirements for agricultural inputs, including energy, fertilisers, feed and agricultural machinery. While the trade of agricultural inputs is relatively well represented in economic analysis, the quantification is often in terms of monetary values, and thus the assessments of the actual input quantities are very limited. In this paper, we develop a framework for analysis of the traded input quantities at the country-level and demonstrate its utility through an in-depth analysis of Finland's dependency on agricultural inputs. Further, we assess the importance of these inputs for domestic food production from a resilience perspective. We find that Finland, a country with relatively high food self-sufficiency but also a great dependency on imported agricultural inputs, experienced an increase in its dependency over the period 1996-2016. In case of trading partners, the story is more mixed: while trading partners for soybeans increased, those decreased in case of electricity while no significant change was observed in other commodities. In Finland, the rapeseed dependency on imports (ratio of net imports and consumption) grew from around 0% to almost 50% between the years 1987-2013. Changes for electricity remained substantially smaller, with dependency only slightly growing during the study period. Crude oil and soybean supplies are totally dependent on imports as neither is produced in Finland. Interestingly, the highest dependencies for agricultural inputs were on different countries than that for foodstuff imports. Thus, when identifying and assessing approaches to increase resilience to trade-related shocks, it is essential to understand both foodstuff and agricultural input dependencies within the global food system.

trade dependencies↗

NASA NTRSDate not supplied

Collaborative Communications Between a Human and a Resilient Safety Support System

Successful introductory UAM integration into the NAS will be contingent on resilient safety systems that support reduced-crew flight operations. In this paper, we present a system that performs three functions: 1) monitors an operator’s physiological state; 2) assesses when the operator is experiencing anomalous states; and 3) mitigates risks by a combination of dynamic, context-based unilateral or collaborative dynamic function allocation of operational tasks. The monitoring process receives high data-rate sensor values from eye-tracking and electrocardiogram sensors. The assessment process takes these values and performs a classification that was developed using machine learning algorithms. The mitigation process invokes a collaboration protocol called DFACC to which, based on context, performs vehicle operations that the operator would otherwise routinely execute. This system has been demonstrated in a UAM flight simulator for an operator incapacitation scenario. The methods and initial results as well as relevant UAM and AAM scenarios will be described.

Advanced Air Mobility,↗

NASA NTRS2021

Collaborative Communications Between A Human and A Resilient Safety Support System

Successful introductory UAM integration into the NAS will be contingent on resilient safety systems that support reduced-crew flight operations. In this paper, we present a system that performs three functions: 1) monitors an operator’s physiological state; 2) assesses when the operator is experiencing anomalous states; and 3) mitigates risks by a combination of dynamic, context-based unilateral or collaborative dynamic function allocation of operational tasks. The monitoring process receives high data-rate sensor values from eye-tracking and electrocardiogram sensors. The assessment process takes these values and performs a classification that was developed using machine learning algorithms. The mitigation process invokes a collaboration protocol called DFACCto which, based on context, performs vehicle operations that the operator would otherwise routinely execute. This system has been demonstrated in a UAM flight simulator for an operator incapacitation scenario. The methods and initial results as well as relevant UAM and AAM scenarios will be described.

Advanced air mobility↗

NASA NTRS2018

Optimization of Second Fault Detection Thresholds to Maximize Mission POS

In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. To accommodate this with regards to Navigation, the SLS utilizes an internally redundant Inertial Navigation System (INS) with built-in capability to detect, isolate, and recover from first failure conditions and still maintain adherence to performance requirements. The unit utilizes multiple hardware- and software-level techniques to enable detection, isolation, and recovery from these events in terms of its built-in Fault Detection, Isolation, and Recovery (FDIR) algorithms. Successful operation is defined in terms of sufficient navigation accuracy at insertion while operating under worst case single sensor outages (gyroscope and accelerometer faults at launch). In addition to first fault detection and recovery, the SLS program has also levied requirements relating to the capability of the INS to detect a second fault, tracking any unacceptable uncertainty in knowledge of the vehicle's state. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error and sensor faults can drive the vehicle outside of its operational as-designed environments and outside of its performance envelope causing loss of mission, or worse, loss of crew. The criteria for operation under second faults allows for a larger set of achievable missions in terms of potential fault conditions, due to the INS operating at the edge of its capability. As this performance is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design space. Due to the implications of the vehicle response to abort conditions (such as a potentially failed INS), it is important to consider a wide range of failure scenarios in terms of both magnitude and time. As such, the Navigation team is taking advantage of the INS's capability to schedule and change fault detection thresholds in flight. These values are optimized along a nominal trajectory in order to maximize probability of mission success, and reducing the probability of false positives (defined as when the INS would report a second fault condition resulting in loss of mission, but the vehicle would still meet insertion requirements within system-level margins). This paper will describe an optimization approach using Genetic Algorithms to tune the threshold parameters to maximize vehicle resilience to second fault events as a function of potential fault magnitude and time of fault over an ascent mission profile. The analysis approach, and performance assessment of the results will be presented to demonstrate the applicability of this process to second fault detection to maximize mission probability of success.

Anzalone, Evan↗

NASA NTRS1961

Development of Ceramic Fibers for Reinforcement in Composite Materials

Refinements of the vertical arc fiberizing apparatus resulted in its ability to fiberize very different refractory glasses having wide ranges of properties. Although the apparatus, was originally designed as a laboratory research tool for the evaluation of many compositions daily, up to one quarter pound of fibers of a single composition could be produced in an 8-hour day. Fibers up to six and a half feet long were produced with the apparatus. Studies were conducted of two methods of fiberizing refractory glasses requiring rapid freezing from the melt. The first method consisted of fiberizing droplets of molten glass passing through an annular nozzle. The second method consisted of reconstructing the annular nozzle in. the shape of a horseshoe to achieve a shorter delay in blasting a molten droplet from the tip of a rod. Both methods were judged feasible for producing fibers of glasses requiring rapid freezing. The first method would be more amenable to volume fiber production. Studies of induction heating for fiber formation did not lead to its designation as a very efficient heating method. Problems. remain to be solved, in the design of a suitable susceptor for a higher heating rate, in protecting the susceptor from oxidation with an inert gas, in contamination of the melt from a refractory crucible, and in the protective radiation shielding of the induction concentrator coil. It is not considered practical to continue studies of this heating method. In the course of this program 151 refractory glass compositions were evaluated for fiber, forming characteristics. Of the various types of materials studied, the following showed promise in producing acceptable refractory fibers: sIlica- spinel (magnesium aluminate), silica- spinel-zirconia, silica-zirconia, silica-zinc spinel, aluminum phosphate glasses, and fluoride glasses. Compositions which did not produce acceptable fibers were high zirconia materials, barium spinels, and calcium aluminates. Improvements in the. testing apparatus for single fiber tensile strength increased the precision. of tests conducted on nine fibers. The highest mean tensile strength, a value of 295,000 pounds per square inch, was obtained with R-141 fibers. Treatment of R-74 fibers with anhydrous Linde A-1100 silane finish improved its mean fiber tensile strength by 25 percent. The lapse of time after fiber formation had no measurable effect on tensile strength. A static heating test conducted with various high melting fibers indicated that Fiberfrax and R-108 underwent no significant changes in bulk volume or resiliency on exposure to 2750 degrees Fahrenheit (1510 degrees Centigrade) in an oxidizing atmosphere. For fiber-resin composition fabrication, ten fiber materials were selected on the bases of high fiber yield, fusion temperature, and type of composition. Fiberfrax, a commercial ceramic fiber, was included for comparison. A new, more effective method of removing pellets from blown fibers was developed. The de-pelletized fibers were treated with a silane finish and felted into ten-inch diameter felts prior to resin impregnation. Composites containing 30 percent by weight of CTL 91-LD phenolic resin were molded under high pressure from the impregnated felts and post-cured to achieve optimum properties. Flexural strength, flexural modules of elasticity, and punch shear strength tests were conducted on the composite specimens. The highest average flexural strength obtained was 19,958 pounds per square inch with the R-74-fiber-resin composite. This compares very favorably with the military specification of 13,000 pounds per square inch flexural strength for randomly oriented fiber reinforced composites. The highest punch shear strength (11,509 pounds per square inch) was obtained with the R-89 fiber-resin composite. The effects of anhydrous fiber finishes on composite strength were not clearly indicated. Plasma arc tests at a heat flux of 550 British Thermal Units per square foot per second on eight composite materials indicated ablation rates generally equivalent to Fiberglas-Micarta No. 259-2. The composite reinforced with R-99 fibers had an average ablation rate of 0.008 inch per second and appears quite promising on the basis of these tests. Preliminary studies for processing fibers into yarn and fabric were conducted with R-99 fibers. The use of certain organic gums aided in 2 fabricating by hand several relatively strong yarns and a crude fabric swatch. This indicated the practicality of developing techniques for processing these fibers into yarn and fabric without significant damage to the fibers.

Gates, L. E.↗

NASA NTRS1990

Quantifying fault recovery in multiprocessor systems

Various aspects of reliable computing are formalized and quantified with emphasis on efficient fault recovery. The mathematical model which proves to be most appropriate is provided by the theory of graphs. New measures for fault recovery are developed and the value of elements of the fault recovery vector are observed to depend not only on the computation graph H and the architecture graph G, but also on the specific location of a fault. In the examples, a hypercube is chosen as a representative of parallel computer architecture, and a pipeline as a typical configuration for program execution. Dependability qualities of such a system is defined with or without a fault. These qualities are determined by the resiliency triple defined by three parameters: multiplicity, robustness, and configurability. Parameters for measuring the recovery effectiveness are also introduced in terms of distance, time, and the number of new, used, and moved nodes and edges.

Malek, Miroslaw↗

NASA NTRS2002

Compact, precision duplex bearing mount for high vibration environments

A duplex bearing mount including at least one duplex bearing having an inner race and an outer race, the inner race disposed within the outer race and being rotatable relative to the outer race about an axis, the inner race having substantially no relative movement relative to the outer race in at least one direction along the axis, the inner and outer races each having first and second axial faces which are respectively located at the same axial end of the duplex bearing. The duplex bearing is radially supported by a housing, and a shaft extends through the inner race, the shaft radially and axially supported by the inner race. A first retainer is connected to the housing and engages the first axial surface of a bearing race, the movement of which race in a first direction along the axis being constrained by the first retainer. A second, resilient retainer is connected to the housing or the shaft and is deflected through engagement with the second axial face of a bearing race, the movement of which race in a second direction along the axis, opposite to the first direction, being constrained by the deflected second retainer. The bearing is preloaded by its being clamped between the first and second retainers, and the second retainer forms at least a portion of a spring having the characteristic of a substantially constant force value correlating to a range of various deflection values, whereby the preload of the bearing is substantially unaffected by variations in the deflection of the second retainer.

Bouzakis, George Elias↗

NASA NTRS2013

Re-Greening Sahel: 30 Years of Remote Sensing Data and Field Observations (Mali, Niger)

Desertification of the Sahel region has been debated for decades, while the concept of a "re-greening" Sahel appeared with satellite remote sensing data that allowed vegetation monitoring across wide regions and over increasingly long series of years (nowadays 30 years with the GIMMS-3g dataset). However, the scarcity of long-term field observations of vegetation in the Sahel prevents ground validation and deeper analysis of such trends. After assessing the consistency of the new GIMMS-3g NDVI product by comparison to three other AVHRR-NDVI datasets and MODIS NDVI, regional GIMMS-3g NDVI trends over 1981-2011 are analyzed. Trends are found positive and statistically significant almost everywhere in Sahel over the 1981-2011 period. Long-term field observations of the aboveground herbaceous layer mass have been collected within the Gourma region in Mali (1984-2011) and within the Fakara region in western Niger (1994-2011). These observations sample ecosystem and soil diversity, thus enabling estimation of averaged values representative of the Gourma and Fakara. NDVI measurements are found in good agreement with field observations, both over the Gourma and Fakara regions where re-greening and negative trends are observed respectively. A linear regression analysis performed between spatially averaged seasonal NDVI and a weighted average of field measurements explains 59% of the variability for the Gourma region over 1984-2011, and 38% for the Fakara region over 1994-2011. In the Gourma, which is a pastoral region, the re-greening trend is mainly observed over sandy soils, and attests for the ecosystem's resilience to the 1980s' drought, able to react to the more favorable rainfall of the 1990s and 2000s. However, contrasted changes in the landscape's functioning have occurred locally. An increase in erosion and run-off processes in association with decreasing or stable vegetation cover was observed over shallow soils, which occupy 30% of the area. In the agro-pastoral Fakara, the decreasing trends observed both from satellite NDVI and field assessments of herbaceous mass are hardly explained by rainfall. These results give confidence in the dominant positive trends in Sahelian greenness, but indicate that degradation trends can also be observed, both in situ and from satellite time series.

Sahel↗

NASA NTRS1983

Control device for prosthetic urinary sphincter cuff

A device for controlling flow of fluid to and from a resilient inflatable cuff implanted about the urethra to control flow of urine therethrough. The device comprises a flexible bulb reservoir and a control unit that includes a manually operated valve that opens automatically when the bulb is squeezed to force fluid into the cuff for closing the urethra. The control unit also includes a movable valve seat member having a relatively large area exposed to pressure of fluid in a chamber that is connected to the cuff and which moves to a position in which the valve member is unseated by an abutment when fluid pressure in the chamber exceeds a predetermined value to thereby relieve excess fluid pressure in the cuff. The arrangement is such that the valve element is held closed against the seat member by the full differential in fluid pressures acting on both sides of the valve element until the seat member is moved away from the valve element to thus insure positive closing of the valve element until the seat member is moved out of engagement with the valve element by excess pressure differential.

Reinicke, Robert H.↗

NASA NTRS2010

Playing a 3-Stringed Violin: Innovation via the Joint Evolution of People, Process, and Knowledge Management System

Users continuously evaluate the value and performance of their Knowledge Management Systems (KMS). As suggested by a punctuated socio-technical system process model, today's success can quickly become tomorrow's failure should the KMS fail to meet evolving needs and expectations. The more deeply a tool is embedded in the actual work process, the more vulnerable it is to emergent changes and perturbations. This paper uses the metaphor of a "3-stringed violin" to explore how differing levels of user knowledge about tools and processes can lead to system perturbations and how the active involvement of other actors can dampen the impact of perturbations, i.e., help the system survive the operational equivalent of a broken string. Recommendations suggest ways to increase system resiliency and contribute to incremental innovation.

Socio-technical systems↗

NASA NTRS1990

A Byzantine resilient processor with an encoded fault-tolerant shared memory

The memory requirements for ultra-reliable computers are expected to increase due to future increases in mission functionality and operating-system requirements. This increase will have a negative effect on the reliability and cost of the system. Increased memory size will also reduce the ability to reintegrate a channel after a transient fault, since the time required to reintegrate a channel in a conventional fault-tolerant processor is dominated by memory realignment time. A Byzantine Resilient Fault-Tolerant Processor with Fault-Tolerant Shared Memory (FTP/FTSM) is presented as a solution to these problems. The FTSM uses an encoded memory system, which reduces the memory requirement by one-half compared to a conventional quad-FTP design. This increases the reliability and decreases the cost of the system. The realignment problem is also addressed by the FTSM. Because any single error is corrected upon a read from the FTSM, a faulty channel's corrupted memory does not need realignment before reintegration of the faulty channel. A combination of correct-on-access and background scrubbing is proposed to prevent the accumulation of transient errors in the memory. With a hardware-implemented scrubber, the scrubbing cycle time, and therefore the memory fault latency, can be upper-bounded at a small value. This technique increases the reliability of the memory system and facilitates validation of its reliability model.

Butler, Bryan↗