Search NASA⌕ Search

SEARCH · Search NASA

Results for “reactor safety system”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 361 records · Page 20
All sourcesNASA NTRSDOE OSTI
DOE OSTI2024

HIGH BURNUP FUEL-COOLANT INTERACTION ANALYSIS SUPPORTING FUEL SAFETY TESTING AT IDAHO NATIONAL LABORATORY

In the near future, experiments on HBu fuel under loss-of-coolant accident (LOCA) and reactivity-initiated accident (RIA) conditions will be performed within the Transient Reactor Test Facility (TREAT) at Idaho National Laboratory (INL). These experiments will be performed using the Transient Water Irradiation System for TREAT (TWIST) experiment vehicle. To support these experiments, analysis of fuel-coolant interaction (FCI) energetics is underway. This paper discusses FCIs in the context of light water reactor (LWR) safety, differentiating between the severe accident focus of commercial reactors and experimental RIA test programs where FCIs have occurred. However, it is highlighted that as the nuclear industry aims for increased burnup limits, the FCI events observed in RIA test programs may become relevant to commercial LWR safety analysis. The paper then presents developments to the UW-FCI computer program to enable simulation of FCIs initiated by solid fuel particles dispersing into the coolant during RIAs.

11 - NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI1995

Nuclear Safety [Vol. 36, No. 2, July-December 1995]

Nuclear Safety is a journal that covers significant issues in the field of nuclear safety. Its primary scope is safety in the design, construction, operation, and decommissioning of nuclear power reactors worldwide and the research and analysis activities that promote this goal, but it also encompasses the safety aspects of the entire nuclear fuel cycle, including fuel fabrication, spent-fuel processing and handling, and nuclear waste disposal, the handling of fissionable materials and radioisotopes, and the environmental effects of all these activities. Table of Contents for this issue follows. THE CHORNOBYL ACCIDENT: 195 The Chornobyl Accident Revisited, Part III: Chernobyl Source Term Release Dynamics and Reconstruction of Events During the Active Phase, A. R. Sich; GENERAL SAFETY CONSIDERATIONS: 218 Second ANS Workshop on the Safety of Soviet-Designed Nuclear Power Plants, R. A. Bari; 234 Elements of a Nuclear Criticality Safety Program, C. M. Hopper; 243 Rickover, Excellence, and Criticality Safety Programs, R. E. Wilson; ACCIDENT ANALYSIS: 249 Transient Analysis of the PIUS Advanced Reactor Design with the TRAC-PF1/MOD2 Code, B. E. Boyack, J. L Steiner, S. C. Harmony, H. J. Stumpf, and J. F. Lime; 278 The Hierarchy-By-Interval Approach to Identifying Important Models that Need Improvement in Severe-Accident Simulation Codes, T. J. Heames, M. Khatib-Rahbar, J. E. Kelly, R. P. Jenks-Johnson, and Y.-S. Chen; 290 RELAP5/MOD3 Code Coupling Model, R. P. Martin; 299 Missiles Caused by Severe Pressurized-Water Reactor Accidents, R. Krieg; DESIGN FEATURES: 310 Validation of COMMIX with Westinghouse AP-600 PCCS Test Data, J. G. Sun, T. H. Chien, J. Ding, and W T. Sha; ENVIRONMENTAL EFFECTS: 321 Spent Nuclear Fuel Characterization for a Bounding Reference Assembly for the Receiving Basin for Off-Site Fuel, S. D. Kahook, R. L. Garrett, L. R. Canas, and M J. Beckum; OPERATING EXPERIENCES: 332 Reactor Shutdown Experience, Compiled by J. W. Cletcher; U.S. NUCLEAR REGULATORY COMMISSION INFORMATION AND ANALYSES: 335 Reactor Coolant System Blowdown at Wolf Creek on September 17, 1994, J. V. Kauffman and S. L. Israel; RECENT DEVELOPMENTS: 344 Reports, Standards, and Safety Guides, D. S. Oueener; 349 Proposed Rule Changes as of June 30, 1995; ANNOUNCEMENTS: 320 Symposium on Acceptability of Risk From Radiation—Application to Manned Space Flight; 320 24th DOE/NRC Nuclear Air Cleaning and Treatment Conference; 361 Radiation Biology and Radiation Protection— Modern Developments and Tendencies in Radiation Biology; 362 1997 IEEE Sixth Conference on Human Factors and Power Plants; 354 The Authors; 360 Reviewers of Nuclear Safety, Vol. 36.

05 NUCLEAR FUELS↗
DOE OSTI2025

Material Selection and Heat Transfer Model for PTUHS Device

The Path to Ultimate Heat Sink Device (PTUHS) is a passive safety system that utilizes a radiative heat transfer valve to control the rate at which heat is removed from a nuclear reactor pressure vessel (RPV) and dispersed into surrounding soil. The material selection for the PTUHS device is investigated, where the thermophysical properties are either maximized or minimized bases on what section of the PTUHS that material is being used for. Final recommendations of material choice are then presented. The heat transfer model of the PTUHS device is solved in ABAQUS, where a normal operating conditions and SCRAM conditions are solved. These temperature maps and heat flux of the system show the system's ability, where minimal heat is lost during normal operating conditions and system failure in a SCRAM scenario due to temperatures that were reached.

42 - ENGINEERING↗
DOE OSTI2023

Extension of Argonne’s Plant Dynamics Code (PDC) Capabilities to TerraPower Direct-Cycle Supercritical CO2 (“Pascal”) Nuclear Reactor Concept. Final CRADA report

Argonne National Laboratory (the Contractor) and TerraPower, LLC, (the Participant), entered into a Cooperative Research and Development Agreement (CRADA) to extend the Plant Dynamics Code (PDC) to model the Pascal reactor plant. PDC is the system-level computer code developed at Argonne, primarily for design and transient analysis of supercritical carbon dioxide (sCO2) energy conversion systems for various power plants. Pascal is a supercritical carbon dioxide (sCO2)-cooled direct-cycle nuclear power reactor under development by TerraPower. New features were added to the code to model components and systems specific to the Pascal plant and to make the code readily available as a tool for design, control, and safety analysis for this and other direct-cycle power plants. TerraPower provided design information of the Pascal reactor and the requirements for the development of the new PDC features. Argonne modified the PDC capabilities to introduce the new features.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2023

Computational model development and validation of fuel dispersal phenomena

As the US nuclear industry is renewing efforts to extend the rod average burnup limits in existing pressurized water reactors, it becomes imperative to investigate the safety implications associated with high burnup fuel fragmentation and the potential dispersal of fragmented fuel into the reactor coolant system. Additionally, as there is a growing interest in transitioning to new nuclear fuel designs to accommodate higher fuel burnup levels, it becomes essential to conduct studies on fuel behavior during design basis accident scenarios, particularly during a postulated loss-of-coolant accident, in order to ensure the safe operation of light-water reactors. The present study develops a computational model to simulate the complex three-phase flow of the fuel dispersal phenomena that occur following a breach in the cladding, when the stream of solid fuel particles and carrier fission gas stream may interact with the surrounding liquid medium. Furthermore, the proposed framework considers the solid phase as discrete Lagrangian particles while the interpenetrating gas–liquid continuum is modeled using a Eulerian framework. The developed simulation framework is validated with experimental results performed in a separate-effect test facility by comparing predicted particle settlement locations with the experimental observations reported in the literature. Key highlights of this study include the interpretation of the high-pressure boundary conditions and the three-phase flow coupling strategy. Also discussed are the gas–liquid hydrodynamics and the behavior of particles as they are transported through the gas and liquid phases.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

The SAS4A/SASSYS-1 Version 5.8 Safety Analysis Code System

SAS4A/SASSYS-1 is a software simulation tool used to perform deterministic analysis of anticipated events as well as design basis and beyond design basis accidents for advanced nuclear reactors. Detailed, mechanistic models of steady-state and transient thermal, hydraulic, kinetic, and mechanical phenomena are employed to describe the response of the reactor core, the reactor primary and secondary coolant loops, the reactor control and protection systems, and the balance-of-plant to accidents caused by changes in coolant flow, loss of heat rejection, or reactivity insertion. The consequences of single and double-fault accidents can be modeled, including fuel and coolant heating, fuel and cladding mechanical behavior, core reactivity feedbacks, coolant loop performance including natural circulation, and decay heat removal. Analyses are typically terminated upon demonstration of reactor and plant shutdown to permanently coolable conditions, or upon violation of design basis margins. The objective of the analysis is to quantify accident consequences as measured by the transient behavior of system performance parameters, such as fuel and cladding temperatures, reactivity, and cladding strain. Originally developed for analysis of sodium cooled reactors with oxide fuel clad by stainless steel, the models were subsequently extended and specialized to metallic fuel clad with advanced alloys and to several other coolant options, including lead, LBE, and water.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2021

Investigation of neutron noise in a micro-scale, natural circulation molten salt fission battery system

The Molten Salt Reactor (MSR) concept is a rapidly evolving Generation IV design that has recently attracted favorable attention due to the potential for reducing waste generation, realizing passive safety features, and seizing on the opportunity for cost effective economics. A specific novel micro-MSR, natural circulation, battery design concept involves placing all primary components within a single reactor vessel containment without the need of primary forced pumping. This small modular, integral design presents potential cost savings while producing safety, reliable, and transportable carbon-free power for decades. This investigation evaluates the neutron noise induced by density and flow fluctuations in a natural circulation MSR battery concept being developed at the University of Idaho. This study finds numerical solutions to the one-dimensional, one-group, coupled diffusion equations for a bare, homogeneous core, and evaluates neutron flux and delayed neutron precursor concentration noise due to core flow and fuel salt density perturbation sources. Noise analysis shows both point kinetic and space-dependent behavior is present despite the small size, low-flow, closely-coupled nature of the natural circulation MSR concept. Analysis shows that the low flow of the convective system results in noise behavior typically representative of a larger forced-circulation MSR system. Finally, noise techniques may also be useful in MSR core diagnostics as a non-invasive, low-cost radiological option to traditional monitoring schemes.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2025

The HTR-Proteus Benchmark: Analysis and Use as a Verification and Validation Case

This presentation outlines the evaluation and application of the HTR-Proteus benchmark as a verification and validation (V&V) case for advanced reactor modeling tools. The work supports the U.S. Department of Energy’s HALEU Availability Program (HAP) and the joint DOE/NRC DNCSH project, which aims to reduce criticality safety uncertainties in commercial-scale HALEU fuel cycle and transportation systems. The HTR-Proteus experiments, conducted at the Paul Scherrer Institute, provide high-fidelity data for TRISO-fueled, graphite-moderated pebble bed reactors with high neutron leakage—conditions relevant to HALEU transport scenarios. This study focuses on Cores 4.2 and 4.3 of the HTR-Proteus benchmark, analyzing key sources of uncertainty including pebble packing, TRISO particle positioning, and core height. Using Project Chrono for realistic pebble geometries and Serpent, SHIFT, and MCNP for neutronics simulations, the study quantifies the impact of these uncertainties on the effective multiplication factor (keff). Results show that a sample size of 110 pebble configurations is sufficient to converge keff, with ±30 pcm uncertainty due to packing randomness. TRISO positioning and core height variations also significantly influence keff, highlighting the importance of detailed modeling in V&V efforts. The benchmark serves as a valuable test case for validating the Griffin reactor physics code and improving confidence in HALEU system simulations.

73 - NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2022

Development of a high-fidelity multi-physics coupling between MCNP6.2 and CTF4.0 for VVER applications

Ensuring system safety in the design, licensing, and operation phases is a priority in the nuclear industry. Performing extensive, full-scale reactor safety experiments is often prohibitive due to the large associated costs. Computational simulations offer an alternative safety analysis method, typically with significant cost reductions. Recent high-level developments in technology and increased availability of computational resources have allowed the development of high-fidelity, high-resolution multi-physics coupled codes. Such developments may be used to generate reference models for deterministic core calculations. Under this framework, the high-fidelity continuous energy Monte Carlo-based neutron transport code MCNP6.2 was coupled externally with the state-of-the-art thermal-hydraulics subchannel code, CTF4.0 for VVER (Water-Water Energetic Reactor) applications. A VVER-1000 fuel assembly model was used to demonstrate the capability of the coupled code. The converged coupled solution is compared to initial results, consisting of the first MCNP evaluation and first CTF evaluation after initialization. The VVER-1000 type assembly results are compared to other evaluations of the same assembly model. The findings indicate good agreement with expectations and reference cases, where available. The initial results of the coupled MCNP6.2/CTF4.0 calculations at the assembly level for steady-state calculations are presented in this study, which may support future work toward high-fidelity coupled full-core modeling capabilities. The multi-physics model may be further improved, enhanced, and expanded for both cycle depletion and transient applications. Such a multi-physics system will also be applicable to the VVER-1200 and other triangular lattice designs and support their deployment and operation safely and economically. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2021

Risk-Informed Analysis for Enhanced Resilient Nuclear Power Plant with Initiatives including ATF, FLEX, and Advanced Battery Technology

This report documents the activities performed by the Idaho National Laboratory (INL) during fiscal year (FY) 2021 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk-Informed Systems Analysis (RISA) Pathway, Enhanced Resilient Plant (ERP) Systems research. The purpose of the RISA Pathway research and development is to support plant owner-operator decisions with the aim to improve the economics, reliability, and maintain the high levels of safety of current nuclear power plants over periods of extended plant operations. The concept of ERP refers to the combinations of accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), enhancements to plant components and systems, the incorporation of augmented or new passive cooling systems, the advanced battery technology with extended capacity, as well as improved fuel cycle efficiency. The objective of the ERP research effort is to use the RISA methods and toolkit in industry applications, including methods development and early demonstration of technologies, in order to enhance existing reactors? safety features and to substantially reduce operating costs through risk-informed approaches to plant design modifications to the plant and their characterization. The ERP R&D efforts in FY 2021 are focused on three industry initiatives, including accident-tolerant fuel (ATF), optimal use of diverse and flexible coping strategy (FLEX), and advanced battery technology with extended capacity.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2020

Risk-Informed Safety Analysis for Accident Tolerant Fuels

Accident Tolerant Fuels (ATF) are being tested by different nuclear vendors and research organizations and their introduction in the US light water reactors fleet is planned for the second half of the 2020`s. In the framework of the US-DOE Light-Water Reactor Sustainability program, Risk-Informed Systems Analysis pathway, researches are being conducted at the Idaho National Laboratory for developing tools and methods that can help the industry quantifying the benefits from the adoption of ATF technology. In this paper we describe the developed risk-informed methodology including the safety analysis codes improvements, and we present some results for selected accident scenarios. The developed methodology combines INL state-of-the-art deterministic Best Estimate code RELAP5-3D, and Probabilistic Risk Analysis tools RAVEN and SAPHIRE. The analyses are performed on a three-loops pressurized water reactor, simulating Station Blackout and LB-LOCA accidents and considering near-term ATFs, or FeCrAl and Chromium-coated clads. Finally, we show how, applying our methodology, the new Core Damage Frequency can be assessed. The results indicated that the main benefits in introducing near-term ATFs concern a significant reduction in the hydrogen production during accident conditions. No significant Core Damage Frequency reduction was found.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2023

Film condensation with high heat fluxes and scaled experiments using pure steam for reactor containment cooling

Condensation tests were performed using a newly developed test facility for scaling the passive containment cooling system (PCCS) to a small modular reactor (SMR). The PCCS of the SMR plays a pivotal role in ensuring greater safety, reliability, and compactness than what is afforded by traditional reactors. Therefore, a well-designed PCCS is essential to SMRs. However, previous studies and test data were unsuitable for scaling, due to high variation in the test geometry and operating conditions. This study intends to close this research gap by using a novel designed scaled test facility consisting of vertical condensing test sections featuring 1-, 2-, and 4-inch-diameter condensing tubes with annular water cooling, and by applying superheated and saturated steam with different steam mass flow ranges of 5–25 g/s. Further, the primary test data, including axial temperatures, mass flow rates, and pressures, were used in conjunction with a standard data reduction method to estimate critical parameters such as heat fluxes, heat transfer coefficients, and condensation rates. These scaled test data would support improving empirical correlations and validating condensation models to identify scaling distortion for SMR PCCSs.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2024

In-situ strain behavior and BISON simulations of Zircaloy cladding subjected to temperature cycling separate-effects tests in a steam environment

Understanding fuel system performance during anticipated transients without scram (ATWSs) in boiling water reactors (BWRs) is necessary for refining current and future safety limits. High-fidelity material models and simulations are fundamental to rigorous assessment of zirconium-based cladding performance. However, experimental thermomechanical data during simulated ATWSs to validate these modes are limited. To provide relevant in-situ data, Zircaloy-4 cladding was subjected to cyclic heating in a steam environment to simulate an out-of-pile BWR ATWS. Digital image correlation was used to capture the cladding strain behavior in-situ for comparison against simulations using the BISON finite element code. Conventional high-temperature models were compared using multiple schemes to gain a better understanding of the applicability of three BISON models to BWR ATWS: (1) the default combination of creep models in BISON, (2) the high-temperature Erbacher model alone, and (3) the low-temperature Limback-Andersson model alone. The cases run with the Limback-Andersson model alone produced the lowest root mean square error (RMSE). The lowest RMSE for the Limback-Andersson model alone was 0.659%, and the highest RMSE reported was 4.22%. A data gap within the model in the temperature regime of interest was also identified, and to account for this gap, the current model in BISON is linearly interpolated between two separate datasets. In conclusion, this evaluation highlights the need to either develop a new model or to improve the existing model to capture transient creep effects resulting from a cyclic temperature transient.

Anticipated transient without SCRAM↗
DOE OSTI2021

Code validation of SAM using natural-circulation experimental data from the compact integral effects test (CIET) facility

The primary objective of this study is to validate the system analysis code, SAM, using experimental data from the Compact Integral Effects Test (CIET) experimental loop. SAM is a modern system analysis code being developed at Argonne National Laboratory for safety analysis of designs for advanced non-light water reactors (non-LWRs), such as sodium-cooled fast reactors, high-temperature gas-cooled reactors, and fluoride salt-cooled high-temperature reactors (FHRs). To support SAM code development for the wide range of non-LWR applications, it is of paramount importance to validate the code against experiments highly relevant to these reactor concepts. Additionally, the CIET facility, which was designed to reproduce the thermal-hydraulics response of FHRs under both forced- and natural-circulation conditions, has been identified and selected as one of the benchmark test facilities for SAM code validation. In this study, two sets of available CIET tests were selected for SAM code validation purposes, namely, power step change transient tests and steady-state natural-circulation tests. For all selected tests, SAM-predicted results show very good agreement with experimental data. The successful validation of SAM against these selected CIET experiments demonstrates that the computer code is well suited for thermal-hydraulics analysis of FHR designs.

42 ENGINEERING↗
NASA NTRS1991

Multi-reactor power system configurations for multimegawatt nuclear electric propulsion

A modular, multi-reactor power system and vehicle configuration for piloted nuclear electric propulsion (NEP) missions to Mars is presented. Such a design could provide enhanced system and mission reliability, allowing a comfortable safety margin for early manned flights, and would allow a range of piloted and cargo missions to be performed with a single power system design. Early use of common power modules for cargo missions would also provide progressive flight experience and validation of standardized systems for use in later piloted applications. System and mission analysis are presented to compare single and multi-reactor configurations for piloted Mars missions. A conceptual design for the Hydra modular multi-reactor NEP vehicle is presented.

George, Jeffrey A.↗
NASA NTRS2019

Potential Improvements to the Nuclear Safety and Launch Approval Process for Nuclear Reactors Utilized for Space Power and Propulsion Applications

This study examines potential improvements that could be made to the nuclear safety and launch approval process for fission reactors to reduce the associated uncertainties in cost and schedule while continuing to ensure public safety and environmental protection. It concentrates on the launch approval and mission safety of fission power and propulsion applications of nuclear energy. Improvements to the launch approval process for radioisotope power systems (RPSs) are being considered elsewhere but are acknowledged throughout the report. The study considered technical, process, and organizational improvements to the launch approval processes. The study exclusively evaluated reactors that would not be started up prior to achieving a “sufficiently high orbit,” per United Nations (UN) Resolution 47/68.Potential criticality accidents were considered that could occur during a launch failure or abort or during reentry. Numerous scenarios were examined that might involve one or more Earth flybys as well as potential transportation missions that could intentionally return an active, or previously active fission reactor to Earth orbit. The Study Group was guided in its deliberations according to a number of fundamental principles. These included the paramount importance of adequate and appropriate levels of public safety and environmental protection as well as the importance of the inclusion of independent scientific, engineering, and safety reviews of the applications and proposals as a critical part of the process. Also considered was the need for the development of launch approval processes that might be different, depending upon the source of the application for launch approval, whether it be derived as a governmental launch, a commercial launch, or a hybrid/combination of the two. It is clear that all launches of nuclear reactors into space should have similar safety requirements; however, the safety review effort and the details of the analysis that are required should be commensurate with the potential hazards and the actual risk, which may differ based on the reactor design and its intended purpose. Finally, the study aimed at ensuring that whatever processes and procedures are developed should maximize the sufficiency, simplicity, and transparency of the processes. The Study Group reached five Conclusions and makes thirteen Recommendations. The Conclusions and Recommendations presented here are extensions of those presented previously in other studies. This report attempts to add specificity to the actions that need to be taken in order to move forward with successful space fission reactor programs. Without action to address the perceived and real problems in the launch approval process, designers and mission managers will be reluctant to commit the resources necessary to make space fission reactors a reality.

Camp, Allen↗
DOE OSTI2022

DOE Advanced Gas Reactor Fuel Development and Qualification Program Overview

AGR-3/4 post-irradiation examination and data analysis AGR-5/6/7 PIE and safety testing Supplemental fuel microanalysis and method development Fuel oxidation testing Air/moisture Ingress Experiment (AMIX) system development (deployed in FY23) Single particle testing in FITT Data management and analysis Fuel performance modeling

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2019

Support for Reactor Operators in Case of Cyber-Security Threats (NEUP Final Report)

Increasing use of digital technology in nuclear power plants (NPPs) poses cyber-security as a crucial threat to public safety and to continuous energy production. Cyber-security risks are comprised of complex known and unknown interactions between various entities, system vulnerabilities, network protocols, human users and malicious attacks. There is little understanding or research geared towards plant operators’ response under cyber-security threats and operational procedures to cope with such threats. This is particularly critical when a cyber-security event masquerades as a safety incident or an evolving accident. Instead of leading operators to the remediation of the accident, the masked cyber event may lead them to circumvent the safety mechanisms of the plant. Given these challenges, the objective of this project is to develop a tool to characterize abnormal NPP events as “cyber” or “safety” incidents, and to further develop this tool as a real-time operator aid to assist in response to the incident. This NEUP Final Report summarizes the research efforts towards the above goals and the results in the following three aspects. First, a methodology for classifying abnormal NPP events as cyber-attacks or safety incidents was developed. This provides the basis for responding to potential cyber-attacks. In this methodology, the causal relationships between various variables (i.e., physical variables, network variables, and control variables) for a nuclear system under consideration are modeled using dynamic Bayesian networks. Based on observations of certain variables (i.e., the evidence), inference is performed to identify the state of hidden variables, which helps indicate the occurrence of cyber-attacks or safety incidents. The proposed methodology was applied to the full scope NPP simulator system at The Ohio State University as a case study. The result shows that the proposed methodology is capable of distinguishing between cyber-attacks and safety incidents. Second, a game-theoretic approach for responding to cyber-attacks on nuclear power plants was developed. This is the second major goal of the project, and the method is used to recommend optimal responses to reactor operators in the case of cyber-attacks. We consider two cases in this research. In the first case, the interaction between the defender (i.e., the reactor operator) and the attacker is modeled as a two-player, nonzero-sum, Markov game with an infinite time horizon. In the second case, we consider a semi-Markov game between the defender and the attacker within a finite time horizon. The model in the second case enables us to consider the time sensitive response of the defender. In each case, the method for deriving the Nash equilibrium is developed. The Nash Equilibrium of the game provides the valid prediction of both players’ actions because no single player can benefit from unilaterally deviating from the equilibrium policy if the other player adheres to his/hers, hence it provides the best response of the defender to cyber-attacks. The proposed method in each case is demonstrated through a simplified benchmark digital feedwater control system. Third, a prototype display is developed to integrate the above information. The prototype display depicts the communication information to the operator and incorporates the cyber-security tool developed by the team into the interface. It consists of the regular display in current control rooms, as well as a panel used to indicate the occurrence of cyber-attacks or safety events and a panel used to guide the operator’s response to detected cyber-attacks.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗