Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety critical software”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

COG User's Manual: A Multiparticle Monte Carlo Transport Code (Sixth Edition)

COG is a high-resolution code for the Monte Carlo simulation of coupled particle transport in arbitrary 3-D geometry. COG will transport neutrons, protons, deuterons, alpha particles with energies up to hundreds of GeV, and photons with energy ranges limited by the available cross section sets and physics models. Electrons can be transported via the EGS5 electron transport kernel, electrons can also be transported. The COG code is a significant upgrade from earlier Monte Carlo transport codes and has been written specifically to make it more versatile, accurate, and easy to use. COG has provisions for calculating deep penetration (shielding) problems, criticality problems, and neutron activation problems while retains all of the standard capabilities found in other Monte Carlo transport codes. COG uses high-resolution pointwise cross-section databases and makes no compromises in the transport physics, so that the results of a COG run are limited only by the accuracy of the databases used. COG runs primarily on Linux Operating System workstations with MPICH software installed – currently, Red Hat 7 & 8, Windows 10 (Windows Subsystem for Linux –WSL), Ubuntu 16, 18 & 20, OpenSUSE Leap 15.2, Fedora 32, Apple Power Mac with Intel CPU (with MacPorts installed) workstations, and LLNL LC supercomputer CTS-1 cluster with TOSS 3 are supported.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Preliminary Nuclear Containment Vessel Modeling for Multi-Hazard Probabilistic Risk Assessment under Seismic Hazards and Concrete Degradation

The current practice for natural phenomena hazards (NPH) risk assessment of nuclear facilities is to compute the risk for each hazard independently and then compound the total risk as a combination of single hazard risks. This state of practice does not consider correlations between hazards and the cascading impacts to structures, systems, and components (SSCs), and could thus underestimate the NPH risk or overestimate the nuclear facility safety. Events such as the Fukushima Daiichi accident have highlighted the importance of multi-hazard risk considerations to nuclear power plants (NPPs) that quantify the cascading damage effects to SSCs in the risk models. Moreover, the current fleet of NPPs in the United States is aging; these NPPs are now expected to operate well beyond their initially planned design life. Aging-related deterioration can potentially decrease the capacity of critical structures such as containment vessels to withstand NPH. Such aging considerations may not be adequately accounted for by the current NPH risk assessment guidelines. This paper presents a preliminary modeling and simulation of a representative reinforced concrete containment vessel subjected to seismic mainshock and aftershock considering concrete degradation due to alkali silica reaction. The broader aim is to develop multi-hazard time-dependent fragility functions that could be subsequently used in the probabilistic risk assessment (PRA) model. The multi-hazard component comes into play due to the consideration of damage to the containment vessel under seismic loads and concrete degradation. Consideration of concrete degradation also brings into play the time-dependent nature of the containment vessel response. The response of the containment vessel under varying degrees of concrete degradation to seismic loads is investigated. The results presented are simulated using the Multi-hazard Analysis for STOchastic time-DOmaiN phenomena (MASTODON) software for seismic analysis and the Blackbear software for concrete degradation and damage modeling. Both software are open source and developed within the Multiphysics Object-Oriented Simulation Environment (MOOSE).

42 ENGINEERING↗

Impact of Advanced Synoptics and Simplified Checklists During Aircraft Systems Failures

Abstract—Natural human capacities are becoming increasingly mismatched to the enormous data volumes, processing capabilities, and decision speeds demanded in today’s aviation environment. Increasingly Autonomous Systems (IAS) are uniquely suited to solve this problem. NASA is conducting research and development of IAS - hardware and software systems, utilizing machine learning algorithms, seamlessly integrated with humans whereby task performance of the combined system is significantly greater than the individual components. IAS offer the potential for significantly improved levels of performance and safety that are superior to either human or automation alone. A human-in-the-loop test was conducted in NASA Langley’s Integration Flight Deck B-737-800 simulator to evaluate advanced synoptic pages with simplified interactive electronic checklists as an IAS for routine air carrier flight operations and in response to aircraft system failures. Twelve U.S. airline crews flew various normal and non-normal procedures and their actions and performance were recorded in response to failures. These data are fundamental to and critical for the design and development of future increasingly autonomous systems that can better support the human in the cockpit. Synoptic pages and electronic checklists significantly improved pilot responses to non-normal scenarios, but implementation of these aids and other intelligent assistants have barriers to implementation (e.g., certification cost) that must overcome.

Etherington, Timothy J.↗

Report of the Panel on Computer and Information Technology

Aircraft have become more and more dependent on computers (information processing) for improved performance and safety. It is clear that this activity will grow, since information processing technology has advanced by a factor of 10 every 5 years for the past 35 years and will continue to do so. Breakthroughs in device technology, from vacuum tubes through transistors to integrated circuits, contribute to this rapid pace. This progress is nearly matched by similar, though not as dramatic, advances in numerical software and algorithms. Progress has not been easy. Many technical and nontechnical challenges were surmounted. The outlook is for continued growth in capability but will require surmounting new challenges. The technology forecast presented in this report has been developed by extrapolating current trends and assessing the possibilities of several high-risk research topics. In the process, critical problem areas that require research and development emphasis have been identified. The outlook assumes a positive perspective; the projected capabilities are possible by the year 2000, and adequate resources will be made available to achieve them. Computer and information technology forecasts and the potential impacts of this technology on aeronautics are identified. Critical issues and technical challenges underlying the achievement of forecasted performance and benefits are addressed.

Lundstrom, Stephen F.↗

Formal Methods Demonstration Project for Space Applications

Requirements and design specifications are a high priority candidate for better software engineering techniques. Most hazardous software safety errors found during system integration and test of two NASA spacecraft were the result of requirements discrepancies or interface specifications. The highest density of major defects found through the use of software inspections was during the requirements phase. This was seven times higher than the density of major defects found in code inspections. Requirements errors are between 10 and 100 times more costly to fix at later phases of the software lifecycle than at the requirements phase itself. One study found that early lifecycle errors are the most likely to lead to catastrophic failures.

critical↗

Formal verification of an avionics microprocessor

Formal specification combined with mechanical verification is a promising approach for achieving the extremely high levels of assurance required of safety-critical digital systems. However, many questions remain regarding their use in practice: Can these techniques scale up to industrial systems, where are they likely to be useful, and how should industry go about incorporating them into practice? This report discusses a project undertaken to answer some of these questions, the formal verification of the AAMPS microprocessor. This project consisted of formally specifying in the PVS language a rockwell proprietary microprocessor at both the instruction-set and register-transfer levels and using the PVS theorem prover to show that the microcode correctly implemented the instruction-level specification for a representative subset of instructions. Notable aspects of this project include the use of a formal specification language by practicing hardware and software engineers, the integration of traditional inspections with formal specifications, and the use of a mechanical theorem prover to verify a portion of a commercial, pipelined microprocessor that was not explicitly designed for formal verification.

Srivas, Mandayam, K.↗

Experimental, Numerical, and Analytical Slosh Dynamics of Water and Liquid Nitrogen in a Spherical Tank

Understanding, predicting, and controlling fluid slosh dynamics is critical to safety and improving performance of space missions when a significant percentage of the spacecraft's mass is a liquid. Computational fluid dynamics simulations can be used to predict the dynamics of slosh, but these programs require extensive validation. Many experimental and numerical studies of water slosh have been conducted. However, slosh data for cryogenic liquids is lacking. Water and cryogenic liquid nitrogen are used in various ground-based tests with a spherical tank to characterize damping, slosh mode frequencies, and slosh forces. A single ring baffle is installed in the tank for some of the tests. Analytical models for slosh modes, slosh forces, and baffle damping are constructed based on prior work. Select experiments are simulated using a commercial CFD software, and the numerical results are compared to the analytical and experimental results for the purposes of validation and methodology-improvement.

slosh↗

Inspecta Technical Report

Sandia National Laboratories (SNL) is in the process of creating Inspecta (International Nuclear Safeguards Personal Examination and Containment Tracking Assistant), an Artificial Intelligence (AI)-powered smart digital assistant (SDA) with robotic capabilities, aimed at enhancing the effectiveness, efficiency, and safety of international nuclear safeguards inspections. This innovative tool is designed to assist inspectors on-site by supporting or automating tasks that are typically mundane, hazardous, or susceptible to errors. In 2021, the development team established the specifications for Inspecta by analyzing International Atomic Energy Agency (IAEA) documents and consulting with former IAEA inspectors and subject matter experts. This process involved aligning in-field inspection tasks with existing commercial or open-source technologies to outline a roadmap for the initial prototype of Inspecta, while also identifying areas needing further research and development. From 2022 – 2024, the focus has shifted to integrating a critical inspection activity, the examination of seals, into an early version of Inspecta. This has involved developing both the software and hardware capabilities necessary for this task. This report outlines the ongoing advancements in Inspecta's functionalities, specifically those supporting the seal examination process.

97 MATHEMATICS AND COMPUTING↗

Inspecta Technical Report

Sandia National Laboratories (SNL) has developed Inspecta (International Nuclear Safeguards Personal Examination and Containment Tracking Assistant), an AI-powered smart digital assistant (SDA) equipped with robotic capabilities. This innovative tool aims to enhance the effectiveness, efficiency, and safety of international nuclear safeguards inspections. Inspecta is designed to assist inspectors on-site by supporting or automating tasks that are often mundane, hazardous, or prone to errors. In 2021, the development team established the specifications for Inspecta by thoroughly analyzing International Atomic Energy Agency (IAEA) documents and consulting with former IAEA inspectors and subject matter experts. This process involved aligning in-field inspection tasks with existing commercial and open-source technologies, thereby creating a roadmap for the initial prototype of Inspecta and identifying areas requiring further research and development. From 2022 to 2025, the focus shifted to integrating a critical inspection activity—the examination of seals—into an early version of Inspecta. This phase has involved the development of both software and hardware capabilities essential for this task. This report outlines the advancements in Inspecta’s functionalities, particularly those that support the seal examination process.

98 NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL P↗

Vehicle Integrated Performance Analysis, the VIPA Experience: Reconnecting with Technical Integration

Today's NASA is facing significant challenges and changes. The Exploration initiative indicates a large increase in projects with limited increase in budget. The Columbia report has criticized NASA for its lack of insight and technical integration impacting its ability to provide safety. The Aldridge report is advocating NASA find new ways of doing business. Very early in the Space Launch Initiative (SLI) program a small team of engineers at MSFC were asked to propose a process for performing a system level assessment of a launch vehicle. The request was aimed primarily at providing insight and making NASA a "smart buyer." Out of this effort the VIPA team was created. The difference between the VIPA effort and many integration attempts is that VIPA focuses on using experienced people from various disciplines and a process which focuses them on a technically integrated assessment. Most previous attempts have focused on developing an all encompassing software tool. In addition, VIPA anchored its process formulation in the experience of its members and in early developmental Space Shuttle experience. The primary reference for this is NASA-TP-2001-210092, "Launch Vehicle Design Process: Characterization, Technical Integration, and Lessons Learned," and discussions with its authors. The foundations of VIPA's process are described. The VIPA team also recognized the need to drive detailed analysis earlier in the design process. Analyses and techniques typically done in later design phases, are brought forward using improved computing technology. The intent is to allow the identification of significant sensitivities, trades, and design issues much earlier in the program. This process is driven by the T-model for Technical Integration described in the aforementioned reference. VIPA's approach to performing system level technical integration is discussed in detail. Proposed definitions are offered to clarify this discussion and the general systems integration dialog. VIPA's capabilities and process can now be used to significantly enhance the development and monitoring of realizable project requirements. This is done through the use of VIPA's V-model. Starting with a given concept, VIPA's assessment validates the concept's stated performance, identifies significant issues either with the concept or the requirements, and then re-integrates these issues to determine impacts. This process is discussed along with a description of how it may be integrated into a program's insight and review process. The VIPA process has been employed successfully on several projects including SLI, Orbital Space Plane (OSP), and several heavy lift concepts for Exploration. It has also been proposed for use on the Jupiter Icy Moon (JIMO) spacecraft. The VIPA process has gained favor with both engineering and project organizations for being responsive and insightful. Selected results from these assessments will be presented.

McGhee, David S.↗

Methodology for physics-informed generation of synthetic neutron time-of-flight measurement data

Accurate neutron cross section data are a vital input to the simulation of nuclear systems for a wide range of applications from energy production to national security. The evaluation of experimental data is a key step in producing accurate cross sections. There is a widely recognized lack of reproducibility in the evaluation process due to its artisanal nature and therefore there is a call for improvement within the nuclear data community. This can be realized by automating/standardizing viable parts of the process, namely, parameter estimation by fitting theoretical models to experimental data. This automation effort could greatly benefit from a synthetic data resource. This work leverages problem-specific physics, Monte Carlo sampling, and a general methodology for data synthesis to generate unlimited, labelled experimental cross-section data that is statistically indistinguishable to the observed data. Heuristic and, where applicable, rigorous statistical comparisons to observed data support this claim. The demonstration is based on/limited to transmission measurements at Rensselaer Polytechnic Institute (RPI) and energy-differential cross sections in the resolved resonance region (RRR). An open-source software is published alongside this article that executes the complete methodology to produce high-utility synthetic datasets. The goal of this work is to provide an approach and corresponding tool that will allow the evaluation community to begin exploring more data-driven, ML-based solutions to long-standing challenges in the field.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗

Toward Certification of Machine-Learning Systems for Low Criticality Airborne Applications

The exceptional progress in the field of machine learning (ML) in recent years has attracted a lot of interest in using this technology in aviation. Possible airborne applications of ML include safety-critical functions, which must be developed in compliance with rigorous certification standards of the aviation industry. Current certification standards for the aviation industry were developed prior to the ML renaissance without taking specifics of ML technology into account. There are some fundamental incompatibilities between traditional design assurance approaches and certain aspects of ML-based systems. In this paper, we analyze the current airborne certification standards and show that all objectives of the standards can be achieved for a low-criticality ML-based system if certain assumptions about ML development workflow are applied.

Avionics↗

Verification and Validation of Flight-Critical Systems

For the first time in many years, the NASA budget presented to congress calls for a focused effort on the verification and validation (V&V) of complex systems. This is mostly motivated by the results of the VVFCS (V&V of Flight-Critical Systems) study, which should materialize as a a concrete effort under the Aviation Safety program. This talk will present the results of the study, from requirements coming out of discussions with the FAA and the Joint Planning and Development Office (JPDO) to technical plan addressing the issue, and its proposed current and future V&V research agenda, which will be addressed by NASA Ames, Langley, and Dryden as well as external partners through NASA Research Announcements (NRA) calls. This agenda calls for pushing V&V earlier in the life cycle and take advantage of formal methods to increase safety and reduce cost of V&V. I will present the on-going research work (especially the four main technical areas: Safety Assurance, Distributed Systems, Authority and Autonomy, and Software-Intensive Systems), possible extensions, and how VVFCS plans on grounding the research in realistic examples, including an intended V&V test-bench based on an Integrated Modular Avionics (IMA) architecture and hosted by Dryden.

Brat, Guillaume↗

Trajectory Specification Applied to Terminal Airspace

Despite major efforts to automate air traffic control (ATC), it is still performed by humans today. The complexity and safety-criticality of ATC makes it very difficult to safely automate, but it must be automated to increase airspace capacity (the density of traffic that can be safely managed) and airport throughput (the number of arrivals and departures that an airport can safely handle in a given period of time) beyond what is possible with human controllers. This paper presents the Trajectory Specification (TS) concept, which can help to safely automate ATC. TS is a method of specifying aircraft trajectories such that the position at any given time in flight is restricted to a precisely defined bounding space, removing all ambiguity as to where the flight is allowed to be. The bounding space or volume is determined by tolerances relative to a reference trajectory (position as a function of time). The tolerances are dynamic and are based on the aircraft navigation capabilities and the traffic situation. The tolerances can be a piecewise linear function of time or distance along the route, allowing the tolerances to vary as needed, typically increasing with time for departures and decreasing for arrivals. A Trajectory Specification Language (TSL) is proposed for communicating trajectories from aircraft to ATC as requests and from ATC to aircraft as assignments. The TS concept requires a new generation of airborne Flight Management Systems (FMS) that understand the TSL and can fly the assigned trajectories, but this paper focuses on the ATC functions and the prototype ATC algorithms and software that were developed to test the TS concept. Assuming conformance, TS can guarantee safe separation for an arbitrary length of time even in the event of an ATC system or communication outage. It can help to achieve the high level of safety and reliability needed for ATC automation, and it can also reduce the reliance on ATC backup systems for tactical conflict detection and resolution during normal operation. TS can be applied to any controlled airspace, including enroute, terminal, and urban airspace, but this paper presents algorithms and software for arrival spacing and conflict detection and resolution in the terminal airspace serving a major airport. In a fast-time simulation of a full day of traffic in a major terminal airspace, all conflicts were resolved in near real time, demonstrating the computational feasibility and the preliminary operational feasibility of the TS concept. This paper is a compilation of previous papers, and it adds significant information that was omitted from those papers due to length limitations. It also updates some of the results of those earlier papers due to algorithm refinements and corrections of minor software errors.

air traffic control, trajectory↗

Taking the Risk Out of Risk Assessment

The ability to understand risks and have the right strategies in place when risky events occur is essential in the workplace. More and more organizations are being confronted with concerns over how to measure their risks or what kind of risks they can take when certain events transpire that could have a negative impact. NASA is one organization that faces these challenges on a daily basis, as effective risk management is critical to the success of its missions especially the Space Shuttle missions. On July 29, 1996, former NASA Administrator Daniel Goldin charged NASA s Office of Safety and Mission Assurance with developing a probabilistic risk assessment (PRA) tool to support decisions on the funding of Space Shuttle upgrades. When issuing the directive, Goldin said, "Since I came to NASA [in 1992], we've spent billions of dollars on Shuttle upgrades without knowing how much they improve safety. I want a tool to help base upgrade decisions on risk." Work on the PRA tool began immediately. The resulting prototype, the Quantitative Risk Assessment System (QRAS) Version 1.0, was jointly developed by NASA s Marshall Space Flight Center, its Office of Safety and Mission Assurance, and researchers at the University of Maryland. QRAS software automatically expands the reliability logic models of systems to evaluate the probability of highly detrimental outcomes occurring in complex systems that are subject to potential accident scenarios. Even in its earliest forms, QRAS was used to begin PRA modeling of the Space Shuttle. In parallel, the development of QRAS continued, with the goal of making it a world-class tool, one that was especially suited to NASA s unique needs. From the beginning, an important conceptual goal in the development of QRAS was for it to help bridge the gap between the professional risk analyst and the design engineer. In the past, only the professional risk analyst could perform, modify, use, and perhaps even adequately understand PRA. NASA wanted to change this by developing a PRA tool that would be friendlier, more understandable, and more useful to the broader engineering community. This concept ultimately led to the look, feel, and functionality that QRAS has today.

Source record↗

Tomography Analysis of Orion Artemis 1 Heatshield Sample

The Orion spacecraft, under NASA's Artemis program, is an integral step in humanity's ambitions of deep space exploration, including our return to the Moon and subsequent mission to Mars. The performance of Orion's heatshield is central to ensuring the safety and success of such missions. This presentation offers a comprehensive overview of the process used in and findings derived from tomography scans of an Artemis 1 heatshield sample executed at the Lawrence Berkeley National Laboratory's Advanced Light Source. These tomography scans captured high-resolution X-Ray images of the heatshield's microstructure, allowing advanced imaging to be employed for 3D image segmentation and visualization of the sample. The Porous Media Analysis (PuMA) software stands central to our analysis, offering robust computational algorithms and methodologies to digitally compute properties of the heatshield material. The presentation discusses the following derived metrics: - Volume fractions, representing the spatial distribution and amounts of various components throughout the heatshield’s depth. - Porosity and crack distributions, offering insights into the void space within the material, critical for understanding the heatshield's structural integrity. - Fiber orientation, detailing the alignment and arrangement of fibers, significant for material orthotropy. - Permeability estimates, quantifying the passage of gas through the material, relevant for re-entry conditions and pyrolysis gasses. One distinctive feature of this study is the comparative evaluation against data obtained from tomography scans of the Exploration Flight Test-1 (EFT-1) heatshield. Such a comparison offers multiple insights, including evaluation of the consistency and repeatability of manufacturing processes as well as understanding of any evolutionary changes in heatshield design or material properties.

Micro-tomography↗

Lyndon B. Johnson Space Center (JSC) proposed dual-use technology investment program in intelligent robots

This paper presents an overview of the proposed Lyndon B. Johnson Space Center (JSC) precompetitive, dual-use technology investment project in robotics. New robotic technology in advanced robots, which can recognize and respond to their environments and to spoken human supervision so as to perform a variety of combined mobility and manipulation tasks in various sectors, is an obejective of this work. In the U.S. economy, such robots offer the benefits of improved global competitiveness in a critical industrial sector; improved productivity by the end users of these robots; a growing robotics industry that produces jobs and profits; lower cost health care delivery with quality improvements; and, as these 'intelligent' robots become acceptable throughout society, an increase in the standard of living for everyone. In space, such robots will provide improved safety, reliability, and productivity as Space Station evolves, and will enable human space exploration (by human/robot teams). The proposed effort consists of partnerships between manufacturers, universities, and JSC to develop working production prototypes of these robots by leveraging current development by both sides. Currently targeted applications are in the manufacturing, health care, services, and construction sectors of the U.S. economy and in the inspection, servicing, maintenance, and repair aspects of space exploration. But the focus is on the generic software architecture and standardized interfaces for custom modules tailored for the various applications allowing end users to customize a robot as PC users customize PC's. Production prototypes would be completed in 5 years under this proposal.

Erikson, Jon D.↗

Lyndon B. Johnson Space Center (JSC) proposed dual-use technology investment program in intelligent robotics

This paper presents an overview of the proposed Lyndon B. Johnson Space Center (JSC) precompetitive, dual-use technology investment project in robotics. New robotic technology in advanced robots, which can recognize and respond to their environments and to spoken human supervision so as to perform a variety of combined mobility and manipulation tasks in various sectors, is an objective of this work. In the U.S. economy, such robots offer the benefits of improved global competitiveness in a critical industrial sector; improved productivity by the end users of these robots; a growing robotics industry that produces jobs and profits; lower cost health care delivery with quality improvements; and, as these 'intelligent' robots become acceptable throughout society, an increase in the standard of living for everyone. In space, such robots will provide improved safety, reliability, and productivity as Space Station evolves, and will enable human space exploration (by human/robot teams). The proposed effort consists of partnerships between manufacturers, universities, and JSC to develop working production prototypes of these robots by leveraging current development by both sides. Currently targeted applications are in the manufacturing, health care, services, and construction sectors of the U.S. economy and in the inspection, servicing, maintenance, and repair aspects of space exploration. But the focus is on the generic software architecture and standardized interfaces for custom modules tailored for the various applications allowing end users to customize a robot as PC users customize PC's. Production prototypes would be completed in 5 years under this proposal.

Erickson, Jon D.↗