SEARCH · Search NASA

Results for “risk constraints”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

All sources NASA NTRS DOE OSTI

NASA NTRS2012

Hypervelocity Impact Initiation of Explosive Transfer Lines

The Gemini, Apollo and Space Shuttle spacecraft utilized explosive transfer lines (ETL) in a number of applications. In each case the ETL was located behind substantial structure and the risk of impact initiation by micrometeoroids and orbital debris was negligible. A current NASA program is considering an ETL to synchronize the actuation of pyrobolts to release 12 capture latches in a contingency. The space constraints require placing the ETL 50 mm below the 1 mm thick 2024-T72 Whipple shield. The proximity of the ETL to the thin shield prompted analysts at NASA to perform a scoping analysis with a finite-difference hydrocode to calculate impact parameters that would initiate the ETL. The results suggest testing is required and a 12 shot test program with surplused Shuttle ETL is scheduled for February 2012 at the NASA White Sands Test Facility. Explosive initiation models are essential to the analysis and one exists in the CTH library for HNS I, but not the HNS II used in the Shuttle 2.5 gr/ft rigid shielded mild detonating cord (SMDC). HNS II is less sensitive than HNS I so it is anticipated that these results using the HNS I model are conservative. Until the hypervelocity impact test results are available, the only check on the analysis was comparison with the Shuttle qualification test result that a 22 long bullet would not initiate the SMDC. This result was reproduced by the hydrocode simulation. Simulations of the direct impact of a 7 km/s aluminum ball, impacting at 0 degree angle of incidence, onto the SMDC resulted in a 1.5 mm diameter ball initiating the SMDC and 1.0 mm ball failing to initiate it. Where one 1.0 mm ball could not initiate the SMDC, a cluster of six 1.0 mm diameter aluminum balls striking simultaneously could. Thus the impact parameters that will result in initiating SMDC located behind a Whipple shield will depend on how well the shield fragments the projectile and spreads the fragments. An end-to-end simulation of the impact of an aluminum ball onto a Whipple shield covering SMDC is problematic due to the hydrocode fracture models. Regardless, two simulations were performed resulting in a 5 mm ball initiating the SMDC and a 4 mm ball failing to initiate the SMDC.

Bjorkman, Michael D.↗

NASA NTRS2023

NASA Passive Thermal Control Engineering Guidebook

The NASA Passive Thermal Control Engineering Guidebook provides recommendations, including best practices and lessons learned, related to the passive thermal control engineering discipline. Topics include analysis (including documentation and review), thermal hardware (design/selection, vendors, and integration), testing, and flight operations. The passive thermal discipline includes thermal control and thermal protection systems. The passive thermal control discipline, which is addressed in this Guidebook, is broad and covers internal and external systems, component passive thermal analysis, vehicle on-orbit attitude timeline analysis, integrated thermal analysis, various thermal control apparatus (heaters and controls, coatings, blankets and insulations, isolators, geometric design for view factors, materials emissivity/absorptivity properties), passive cooling of avionics, purge, vent, and drain for vehicle cavities and compartments, thermal model development and correlation, thermal cycle and thermal-vacuum testing. Topics related to thermal protection systems (TPS) are not within the scope of this document. The Guidebook provides a consolidated reference for early career as well as experienced engineers embarking on a new task. Leveraging the experience of the group minimizes the learning curve that exists at the start of new projects, reduces the risk of repeating mistakes, and improves the organization’s ability to deliver high-quality products efficiently. The intent of this document is to provide guidance based on collective experience, and is not intended impose constraints on project work. Best practices can vary substantially and it is important to apply judgment wisely based on careful consideration of the specific design and requirements. Implementation of the methods described will vary from project to project and should be applied in conjunction with the judgment of the thermal engineers performing and reviewing the work. The recommendations in this document are not intended to replace program, project, branch, Center, or NASA requirements and/or policies.

thermal↗

NASA NTRS2023

NASA Passive Thermal Control Engineering Guidebook

thermal↗

DOE OSTI2024

On the role of Battery Energy Storage Systems in the day-ahead Contingency-Constrained Unit Commitment problem under renewable penetration

The integration of variable Renewable Energy Sources (vRES) to alleviate greenhouse gas emissions has introduced significant challenges for power systems operations. These challenges include high levels of uncertainty due to the intermittence associated with vRES and therefore impose the need to devise a reliable and cost-effective day-ahead unit commitment and power and reserves scheduling for real-time operations. Also, this increasing penetration of vRES requires higher ramping capabilities from units originally designed for other purposes (e.g., base-load generation), which might be exacerbated during contingency states. Hence, in this work, we propose a methodology to address the day-ahead Contingency-Constrained Unit Commitment (CCUC) problem that leverages the participation of Battery Energy Storage Systems (BESSs) to address load-following and post-contingency management, therefore alleviating the ramping burden on conventional thermal generators. To do so, we formulate a three-level optimization problem that represents the decision-making process of obtaining the least-cost commitment, generation and reserves scheduling, while restricting the Conditional Value-at-Risk (CVaR) of the system imbalance at real-time operations to user-defined tolerance levels. In addition, we devise a computationally efficient solution approach for the proposed problem based on the Column-and Constraint Generation (CCG) algorithmic framework. Two numerical experiments are conducted to empirically illustrate the benefits of the proposed methodology. Key results indicate a reduction in real-time ramping needs and a better usage of the system resources, with a reduction in the overall system commitment levels and reserve scheduling costs when compared to a benchmark case in which storage is not available.

Moreira, Alexandre↗

DOE OSTI2022

Shifts in hydropower operation to balance wind and solar will modify effects on aquatic biota

To avoid negative consequences to freshwater biota from climate change, society must complete the transition from fossil to renewable electricity sources. However, temporal patterns in hydropower generation (and flow releases that affect aquatic biota) may change with increased wind and solar penetration. We used power cost modeling to characterize current and future within-day and seasonal patterns in hydropower generation across the Eastern Interconnection in a wet and a dry year. Compared to the baseline, future hydropower generation across the grid decreased during the day and increased before dawn and after dusk. At a project level, such a pattern would suggest 'double peaking' operation (up- and down-ramping before dawn and after dusk, with lower releases midday). Variation in generation was higher in wet years than dry years, foreshadowing possible flow constraints on hydropower flexibility. At the grid scale, projected ramping rates were higher in all seasons. A review of the ecological literature suggests that these changes would shift the timing of invertebrate drift and elevate the risk of nest scouring during up-ramping and the risk of stranding or dewatering during down ramping. Thermal conditions may be moderated by increased ramping. Strategies for adapting to future shifts in the renewable portfolio range from re-regulation in reservoir cascades to providing flow refuge (structures and vegetation) below individual projects. Coordinated basin-scale operation can distribute peaking operation to maintain grid support while restricting local ramping at critical ecological times. In addition, research to design hybrid renewable systems that add battery storage is needed to understand how we can mitigate future risks to aquatic communities while promoting the use of renewable energy. This study, which is among the first to examine ecological side-effects of the shift to renewable energy in freshwater ecosystems, lays out a path toward understanding and navigating changes to flow regimes under the energy transition.

54 ENVIRONMENTAL SCIENCES↗

DOE OSTI2025

Adaptive Client Selection in Federated Learning: A Network Anomaly Detection Use Case

Federated Learning (FL) has become a ubiquitous approach for training machine learning models on decentralized data, addressing the myriad privacy concerns inherent in traditional centralized methods. However, the efficiency of FL depends on effective client selection and robust privacy preservation mechanisms. Inadequate client selection may lead to suboptimal model performance, while insufficient privacy measures risk exposing sensitive data. This paper proposes a client selection framework for FL that integrates differential privacy and fault tolerance. Our adaptive approach dynamically adjusts the number of selected clients based on model performance and system constraints, ensuring privacy through calibrated noise addition. We evaluate our method on a network anomaly detection use case using the UNSW-NB15 and ROAD datasets. Results show up to a 7% increase in accuracy and a 25% reduction in training time compared to FedL2P. Moreover, we highlight the trade-offs between privacy budgets and model performance, with higher privacy budgets reducing noise and improving accuracy. Our fault tolerance mechanism, while causing a slight performance drop, enhances robustness to client failures. Statistical validation using Mann-Whitney U tests confirms the significance of these improvements (p < 0.05).

Marfo, William [University of Texas at El Paso,Dep↗

NASA NTRS2004

A Glass Can Be Half Full: Even in Microgravity

When conducting physical science research in space, the smallest vibration or disturbance can disrupt sensitive experiments. Back in the 1990s we developed an instrument, the Space Acceleration Measurement System (SAMS) that flew on the shuttle to monitor the vibration environment - but it wasn't very flexible. It could only measure vibrations for three users and only at fixed frequency ranges, and it had to be disassembled after each two-week mission to be readied for reuse. Then the International Space Station came along. Our researchers needed a second-generation system, the SAMS-II, which would measure acceleration and vibrations for multiple payloads conducting experiments throughout the life of the station. Measurement requirements were all over the map with a variety of frequencies that needed measuring over a broad dynamic range, so it was essential to develop a robust system that would be flexible enough to accommodate all the particular users. We came up with a concept using the Space Station's Ethernet as the means to talk between multiple remote triaxial sensor systems and a remote controller box. Ultimately, our job was to acquire data within the existing constraints of the station and to quickly and effectively get that information to the scientists. In 1994 we had a $2.1-million budget and a four-year development schedule aimed at achieving these goals. Technical risks were few and primarily resulted from uncertainty of ISS capabilities. At that point, we didn't worry about a thing programmatically; our cup runneth over.

Sutliff, Thomas↗

NASA NTRS2006

Generalized Separation of an Object Jettisoned from the ISS

The International Space Station (ISS) Program faces unprecedented logistics challenges in both upmass and downmass. Some items employed on the ISS exterior present significant technical issues for a controlled de-orbit on either the shuttle or an expendable supply vehicle. Such manifest problems arise due to structural degradation, insufficient containment of hazardous pressures or contents, excessive size, or some combination of all of these factors. In addition, the mounting hardware and other flight service equipment to manifest the returned equipment must itself be launched, competing with other upmass. EVA techniques and equipment to successfully contain and secure such problematic equipment result in numerous significant risks to the spacewalking crews and cost and schedule risks to the program. The ISS Program office has therefore developed a policy that advises the jettison of the most problematic objects. Such jettisoned items join a small family of nearly co-planar orbital debris objects that threaten the ISS on several timescales, besides threatening all satellites with perigee below the ISS orbit and the general human population on Earth. This analysis addresses the governing physics and the ensuing risks when an object is jettisoned. It is shown that there are four time domains which must be considered, each with its own inherent problems, and that a ballistic solution is usually possible that satsfies all constraints in all domains.

Bacon, Jack↗

NASA NTRS2014

Towards Test Driven Development for Computational Science with pFUnit

Developers working in Computational Science & Engineering (CSE)/High Performance Computing (HPC) must contend with constant change due to advances in computing technology and science. Test Driven Development (TDD) is a methodology that mitigates software development risks due to change at the cost of adding comprehensive and continuous testing to the development process. Testing frameworks tailored for CSE/HPC, like pFUnit, can lower the barriers to such testing, yet CSE software faces unique constraints foreign to the broader software engineering community. Effective testing of numerical software requires a comprehensive suite of oracles, i.e., use cases with known answers, as well as robust estimates for the unavoidable numerical errors associated with implementation with finite-precision arithmetic. At first glance these concerns often seem exceedingly challenging or even insurmountable for real-world scientific applications. However, we argue that this common perception is incorrect and driven by (1) a conflation between model validation and software verification and (2) the general tendency in the scientific community to develop relatively coarse-grained, large procedures that compound numerous algorithmic steps.We believe TDD can be applied routinely to numerical software if developers pursue fine-grained implementations that permit testing, neatly side-stepping concerns about needing nontrivial oracles as well as the accumulation of errors. We present an example of a successful, complex legacy CSE/HPC code whose development process shares some aspects with TDD, which we contrast with current and potential capabilities. A mix of our proposed methodology and framework support should enable everyday use of TDD by CSE-expert developers.

pFUnit↗

NASA NTRS2016

Threats to North American Forests from Southern Pine Beetle with Warming Winters

In coming decades, warmer winters are likely to lift range constraints on many cold-limited forest insects. Recent unprecedented expansion of the southern pine beetle (SPB, Dendroctonus frontalis) into New Jersey, New York, Connecticut, and Massachusetts in concert with warming annual temperature minima highlights the risk that this insect pest poses to the pine forests of the northern United States and Canada under continued climate change. Here we present the first projections of northward expansion in SPB-suitable climates using a statistical bioclimatic range modeling approach and current-generation general circulation model (GCM) output under the RCP 4.5 and 8.5 emissions scenarios. Our results show that by the middle of the 21st century, the climate is likely to be suitable for SPB expansion into vast areas of previously unaffected forests throughout the northeastern United States and into southeastern Canada. This scenario would pose a significant economic and ecological risk to the affected regions, including disruption oflocal ecosystem services, dramatic shifts in forest structure, and threats to native biodiversity.

risk↗

NASA NTRS2018

ADEPT SR-1 Development and Testing

The Adaptable Deployable Entry and Placement Technology (ADEPT) Sounding Rocket One (SR-1) fight test will be the first sub-orbital flight of Nano-ADEPT. Nano-ADEPT is a deployable heatshield for secondary payload missions desiring to re-enter the Earth's atmosphere or deliver small science payloads to Mars or Venus. Two units have been built and tested in preparation of launch: one designated the "Spare" unit and one the "Flight" unit. The general development approach has been to perform all procedures on the Spare prior to performing them on Flight. This approach has served the project well, allowing for procedures to be rapidly developed and tested on spare hardware where mistakes are less consequential. Conversely, when schedule constraints have come up, the approach has allowed the project to rapidly pivot to an approach where Flight drives the critical path rather than Spare. This approach has enabled relatively rapid development of Flight where technical risk is balanced with schedule realism. This presentation will describe the various tests that have been performed on Nano-ADEPT Spare and Flight units to prepare for the sub-orbital flight. The purpose is to communicate the development approach we took for this low-cost, moderate-risk flight test and hopefully engage the EDL community in a wider discussion of risk-balanced approaches toward flight hardware development of secondary payload atmospheric entry systems.

Smith, Brandon↗

DOE OSTI2025

The Observed and Projected Changes of Global Monsoons: Current Status and Future Perspectives

The global monsoon system, encompassing the Asian-Australian, African, and American monsoons, sustains two-thirds of the world’s population by regulating water resources and agriculture. Monsoon anomalies pose severe risks, including floods and droughts. Recent research associated with the implementation of the Global Monsoons Model Intercomparison Project under the umbrella of CMIP6 has advanced our understanding of its historical variability and driving mechanisms. Observational data reveal a 20th-century shift: increased rainfall pre-1950s, followed by aridification and partial recovery post-1980s, driven by both internal variability (e.g., Atlantic Multidecadal Oscillation) and external forcings (greenhouse gases, aerosols), while ENSO drives interannual variability through ocean-atmosphere interactions. Future projections under greenhouse forcing suggest long-term monsoon intensification, though regional disparities and model uncertainties persist. Models indicate robust trends but struggle to quantify extremes, where thermodynamic effects (warming-induced moisture rise) uniformly boost heavy rainfall, while dynamical shifts (circulation changes) create spatial heterogeneity. Volcanic eruptions and proposed solar radiation modification (SRM) further complicate predictions: tropical eruptions suppress monsoons, whereas high-latitude events alter cross-equatorial flows, highlighting unresolved feedbacks. The emergent constraint approach is booming in terms of correcting future projections and reducing uncertainty with respect to the global monsoons. Critical challenges remain. Model biases and sparse 20th-century observational data hinder accurate attribution. The interplay between natural variability and anthropogenic forcings, along with nonlinear extreme precipitation risks under warming, demands deeper mechanistic insights. Additionally, SRM’s regional impacts and hemispheric monsoon interactions require systematic evaluation. Addressing these gaps necessitates enhanced observational networks, refined climate models, and interdisciplinary efforts to disentangle multiscale drivers, ultimately improving resilience strategies for monsoon-dependent regions.

climate extreme events↗

DOE OSTI2020

Development and Application of a Risk Analysis Toolkit for Plant Resources Optimization

This report summarizes the R&D activities of the Risk Informed Asset Management (RIAM) project during fiscal year 2020 (FY20). This project focuses on the development of methods designed to optimize plant operations (e.g., maintenance/replacement schedule, optimal maintenance posture) provided system/component health/cost data. This project development lives in cooperation with the Plant Health Management (PHM) project which focuses on the development of methods that integrate component health data and propagate such information at the system level to evaluate most relevant sources of risk. This year’s activities for the RIAM project focused on the continuation of schedule optimization algorithms developed in FY19. While in FY19 we focused on both deterministic and stochastic capital budgeting methods, in FY20 we moved forward by implementing two versions of schedule optimization methods. The first one reformulates the capital budgeting problem in a distributionally robust form which allows the user to rely on data directly rather than proposing a distribution from the data itself. The second version reformulates the capital budgeting explicitly using risk measures as variables to maximize/minimize. Lastly, we focused on the development of methods designed to identify the optimal maintenance posture based on the Pareto Frontier analysis. Rather than performing a tradeoff analysis (i.e., identify the absolute best posture), the Pareto Frontier analysis performs a trade space exploration approach (i.e., identify value and costs of several postures and have the analyst perform the task of imposing desired value and cost constraints). This is performed by identifying maintenance postures that maximize value (e.g., system availability) and minimize operational costs, i.e., the Pareto frontier in a value-cost trade space.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2025

Software For Advanced Large-scale Analysis Of Magnetic Confinement For Numerical Design, Engineering & Research (salamander)

As magnetic confinement fusion energy gains traction internationally to enable abundant energy production, designing components for fusion systems is a pressing challenge. During the planned lifetime of a fusion device, components evolve in extreme environments and must withstand large, repeated thermal loads and bombardment by 14 MeV neutrons, plasma ions, and neutral particles (deuterium, tritium, and helium), corrosive conditions, etc. All these physical processes take place simultaneously, interact in intricate ways, and impose important constraints that can affect performance. Experimental data is rare and costly to obtain, making design particularly challenging. Predictive computational frameworks must be an integral part of an accelerated and cost-effective design process by modeling fusion system performance in simulated environments. To better understand component degradation and operational impacts on their performance, the Software for Advanced Large-scale Analysis of MAgnetic confinement for Numerical Design, Engineering & Research (SALAMANDER) is designed as an open-source, fully integrated, multiphysics, multiscale, NQA-1 compliant framework facilitating 3D, high-fidelity fusion system modeling. To that end, SALAMANDER is a MOOSE-based framework, and therefore leverages MOOSE upstream libraries such as PETSc and libMesh to deliver sophisticated finite element, finite volume, and nonlinear solver technology for fusion energy simulations. SALAMANDER couples MOOSE physics module capabilities—such as thermal hydraulics, heat conduction, Navier-Stokes, and thermomechanics—with tritium transport via TMAP8, neutronics via Cardinal, and nascent particle-in-cell capabilities. Direct simulation Monte Carlo methods will be used to address neutral transport near the walls. By coupling all these physics in an integrated application, SALAMANDER will enable high-fidelity modeling of irradiation levels and plasma exposure conditions of plasma facing components and their impact on heat and tritium distributions, as well as the resulting mechanical constraints experienced by the plasma facing components and performance of blanket systems. Furthermore, SALAMANDER will be particularly suited for engineering studies thanks to the stochastic tool module readily available in MOOSE, allowing for extended uncertainty quantification and risk analysis studies. It is also able to use computer-aided design (CAD) meshes to model complex geometries, which is indispensable for fusion systems. SALAMANDER therefore supports design, safety, engineering, and research projects for magnetic confinement fusion systems

Simon, Pierre-Clement [Idaho National Laboratory (↗

NASA NTRS2000

Economic Metrics for Commercial Reusable Space Transportation Systems

The success of any effort depends upon the effective initial definition of its purpose, in terms of the needs to be satisfied and the goals to be fulfilled. If the desired product is "A System" that is well-characterized, these high-level need and goal statements can be transformed into system requirements by traditional systems engineering techniques. The satisfaction of well-designed requirements can be tracked by fairly straightforward cost, schedule, and technical performance metrics. Unfortunately, some types of efforts, including those that NASA terms "Programs," tend to resist application of traditional systems engineering practices. In the NASA hierarchy of efforts, a "Program" is often an ongoing effort with broad, high-level goals and objectives. A NASA "project" is a finite effort, in terms of budget and schedule, that usually produces or involves one System. Programs usually contain more than one project and thus more than one System. Special care must be taken in the formulation of NASA Programs and their projects, to ensure that lower-level project requirements are traceable to top-level Program goals, feasible with the given cost and schedule constraints, and measurable against top-level goals. NASA Programs and projects are tasked to identify the advancement of technology as an explicit goal, which introduces more complicating factors. The justification for funding of technology development may be based on the technology's applicability to more than one System, Systems outside that Program or even external to NASA. Application of systems engineering to broad-based technology development, leading to effective measurement of the benefits, can be valid, but it requires that potential beneficiary Systems be organized into a hierarchical structure, creating a "system of Systems." In addition, these Systems evolve with the successful application of the technology, which creates the necessity for evolution of the benefit metrics to reflect the changing baseline. Still, economic metrics for technology development in these Programs and projects remain fairly straightforward, being based on reductions in acquisition and operating costs of the Systems. One of the most challenging requirements that NASA levies on its Programs is to plan for the commercialization of the developed technology. Some NASA Programs are created for the express purpose of developing technology for a particular industrial sector, such as aviation or space transportation, in financial partnership with that sector. With industrial investment, another set of goals, constraints and expectations are levied on the technology program. Economic benefit metrics then expand beyond cost and cost savings to include the marketability, profit, and investment return requirements of the private sector. Commercial investment criteria include low risk, potential for high return, and strategic alignment with existing product lines. These corporate criteria derive from top-level strategic plans and investment goals, which rank high among the most proprietary types of information in any business. As a result, top-level economic goals and objectives that industry partners bring to cooperative programs cannot usually be brought into technical processes, such as systems engineering, that are worked collaboratively between Industry and Government. In spite of these handicaps, the top-level economic goals and objectives of a joint technology program can be crafted in such a way that they accurately reflect the fiscal benefits from both Industry and Government perspectives. Valid economic metrics can then be designed that can track progress toward these goals and objectives, while maintaining the confidentiality necessary for the competitive process.

Shaw, Eric J.↗

NASA NTRS2001

International Space Station as an Observation Platform for Hypersonic Re-Entry of its Visiting Vehicles

The International Space Station (ISS) will receive an armada of visiting supply vehicles during its life in orbit. Over 500 tons of material will be destroyed in targeted re-entries of these vehicles. Because all such re-entries lie in the same orbital plane of the station, and because the visiting vehicles typically deorbit within a few hours of departure, the ISS will usually be within sight of the re-entry process, at a range of only 300-600 kilometers. This vantage point offers an unprecedented opportunity for systematically measuring hypersonic destructive processes. This paper examines the integrated operational constraints of the ISS, its supply vehicles, and candidate sensors which can be employed in the scientific observation of the re-entry process. It is asserted the ISS program has the potential to reduce the worldwide risks from future deorbiting spacecraft, through systematic experimental characterization of the factors which affect the rupture, debris survival, and footprint size of its visiting vehicle fleet.

Bacon, John B.↗

NASA NTRS2015

Process Control for Precipitation Prevention in Space Water Recovery Systems

The ability to recover and purify water through physiochemical processes is crucial for realizing long‐term human space missions, including both planetary habitation and space travel. Because of their robust nature, rotary distillation systems have been actively pursued by NASA as one of the technologies for water recovery from wastewater primarily comprised of human urine. A specific area of interest is the prevention of the formation of solids that could clog fluid lines and damage rotating equipment. To mitigate the formation of solids, operational constraints are in place that limits such that the concentration of key precipitating ions in the wastewater brine are below the theoretical threshold. This control in effected by limiting the amount of water recovered such that the risk of reaching the precipitation threshold is within acceptable limits. The water recovery limit is based on an empirically derived worst case wastewater composition. During the batch process, water recovery is estimated by monitoring the throughput of the system. NASA Johnson Space Center is working on means of enhancing the process controls to increase water recovery. Options include more precise prediction of the precipitation threshold. To this end, JSC is developing a means of more accurately measuring the constituent of the brine and/or wastewater. Another means would be to more accurately monitor the throughput of the system. In spring of 2015, testing will be performed to test strategies for optimizing water recovery without increasing the risk of solids formation in the brine.

Sargusingh, Miriam↗

DOE OSTI2021

Cyber Threat Assessment Methodology for Autonomous and Remote Operations for Advanced Reactors (Conference Presentation)

The next generation of Advanced Reactors include planned capabilities for both Autonomous (operating without human interaction for a set period-of-time) and Remote (operating with human interaction from a separate physical location) Operations. Existing Nuclear Reactor architectures include a set of safety and security constraints tightly coupled with personnel policies and procedures. As Advanced Reactors are fielded with these new Autonomous and Remote operational capabilities, the architectures and associated infrastructure services and components will perceivably expand the overall attack surface and risk calculations with regards to safe and secure operations. This paper is part of an FY21 work program focused on ensuring Advanced Reactor designs are informed with threat-based guidance on design and operation of Secure Architectures with a specific focus on the deployment of Autonomous Systems in support of Advanced Reactor Operations. The next phase of this research program is to complement produce a methodology for assessment of the cyber threat against these architectures as well as a catalogue of Use Cases to support the Advanced Reactor community in their implementation of Autonomous and Remote Operations.

97 MATHEMATICS AND COMPUTING↗