Search NASA⌕ Search

SEARCH · Search NASA

Results for “risk identification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

High Voltage EEE Parts for EMA/EHA Applications on Manned Launch Vehicles

The objective of this paper is an assessment of high voltage electronic components required for high horsepower electric thrust vector control (TVC) systems for human spaceflight launch critical application. The scope consists of creating of a database of available Grade 1 electrical, electronic and electromechanical (EEE) parts suited to this application, a qualification path for potential non-Grade 1 EEE parts that could be used in these designs, and pathfinder testing to validate aspects of the proposed qualification plan. Advances in the state of the art in high power electric power systems enable high horsepower electric actuators, such as the electromechnical actuator (EMA) and the electro-hydrostatic actuator (EHA), to be used in launch vehicle TVC systems, dramaticly reducing weight, complexity and operating costs. Designs typically use high voltage insulated gate bipolar transistors (HV-IGBT). However, no Grade 1 HV-IGBT exists and it is unlikely that market factors alone will produce such high quality parts. Furthermore, the perception of risk, the lack of qualification methodoloy, the absence of manned space flight heritage and other barriers impede the adoption of commercial grade parts onto the critical path. The method of approach is to identify high voltage electronic component types and key parameters for parts currently used in high horsepower EMA/EHA applications, to search for higher quality substitutes and custom manufacturers, to create a database for these parts, and then to explore ways to qualify these parts for use in human spaceflight launch critical application, including grossly derating and possibly treating hybrid parts as modules. This effort is ongoing, but results thus far include identification of over 60 HV-IGBT from four manufacturers, including some with a high reliability process flow. Voltage ranges for HV-IGBT have been identified, as has screening tests used to characterize HV-IGBT. BSI BS ISO 21350 Space systems Off-the-shelf item utilization, developed from Marshall Work Instruction MWI8060.1 OFF-THE-SHELF HARDWARE UTILIZATION IN FLIGHT HARDWARE DEVELOPMENTwas found to provide guidance for including commercial off-the-shelf (COTS) hardware for use in critical applications.

Griffin, Trent↗

Analysis of Bioburden Associated with Nonmetallic Spacecraft Materials

Planetary Protection (PP) requirements help to ensure the integrity of life-detection science conducted on solar system bodies, particularly those with liquid water. Such requirements are often met by a combination of cleaning and verification steps to reduce microbial contamination (i.e. bioburden) to an acceptable limit. There are only two cleaning methods approved by the National and Space Administration (NASA), vapor hydrogen peroxide (VHP) and heat microbial reduction (HMR), the latter of which is the most commonly employed. However, HMR can be harsh and produce its own concerns about material integrity, like aging or increasing hardness. When bioburden reduction methods cannot be employed, the project must rely on assumed NASA specification values of bioburden which can cause compliance issues with strict PP bioburden limitations. This work aimed to more accurately define the risk of contamination of a target body by providing empirical data associated with raw materials commonly used in solid rocket motors for lander missions. In this study, we pulverized nonmetallic materials using a cryogenic grinder, then analyzed the resulting substrate for microbial colony forming units (CFU). We found that many nonmetallic materials do not harbor large bioburden when compared with the NASA specification values, though a range existed depending on the material, treatment, and handling. The results from this work provide quantitative data to help reduce concerns of contamination, while also providing a foundation for follow up studies into additional sterilization methods and molecular identification of contaminating microbes.

Planetary Protection↗

Development of Analysis Methods that Integrate Numeric and Textual Equipment Reliability Data

Within the Light Water Reactor Sustainability (LWRS) program, the Risk-Informed Systems Analysis (RISA) Pathway is performing collaborative research on the development and deployment of technologies designed to assist operating nuclear power plants (NPPs) to reduce operating costs improve plant reliability and availability. One of the RISA research areas is focusing on the development of methods and tools designed to optimize plant operations (e.g., maintenance/replacement schedules, optimal maintenance postures for plant structures, systems, and components [SSCs]) in a manner that is more cost effective than current approaches and makes better use of available SSC health data. The Risk-Informed Asset Management (RIAM) project targets this research area by creating a direct bridge between component equipment reliability (ER) data and system engineer decision making regarding maintenance activity scheduling and component aging management. In this respect, one challenge that NPP system engineers are facing is that the amount of ER data being continuously generated is not only extremely large in size, but it comes in different forms: textual (e.g., condition or maintenance reports) and numeric (e.g., generated by monitoring systems). All these data elements provide them with valuable insights and information regarding: 1) the discovery of anomalous behaviors or degradation trends, 2) the identification of the possible causes behind such behaviors/trends, and 3) the prediction of their direct consequences. However, several challenges have proved to be roadblocks to this process. While some of these challenges are technical in nature (i.e., data are often distributed over several physical servers/databases), others are conceptual in nature: data elements come in different formats (e.g., numeric or textual), and measured values have different scales (e.g., vibration spectra and oil temperature). The activities performed by the RIAM project during FY23 directly tackles the need to simultaneously integrate the analysis of ER data in all its forms, numeric and textual. Note that such task has never been performed before due to the complexity of the systems under consideration but, most importantly, because of the technical challenges behind the harmonization of ER data formats and the lack of adequate computational methods to analyze them. Our approach borrows ideas and concepts from the medical field where integration of several data sources is vital to assist medical practitioners to perform correct diagnosis and indicate optimal treatments. In our view a NPP asset is equivalent to a patient in a medical context. The main difference is the complexity of a human body is a magnitude more complex when compared to typical assets commonly present in NPPs (e.g., centrifugal pumps, or motor operated valves). This simplifies our first requirement when analyzing heterogenous ER data formats: to put data into “context”. Context is here intended as the additional piece of information that is needed by ER data analysis tools to understand what these data elements are referring to, i.e., which king of knowledge they are generating. In our context, this knowledge can be translated into models that capture the form and functional architecture of assets/systems, their dependencies, and how they interact. These models actually emulate the knowledge that that NPP system engineers possess about assets and systems; this is their key of success when analyzing ER data, their challenge is ability to handle large amount of data. Here, we employ model-based system engineering (MBSE) models of systems and assets to represent and capture their architecture and functional, i.e. cause-effect, relations. Then, ER data elements are processed by identifying first of all which elements of the developed MBSE elements they are referring to. For numeric ER data this task is fairly easy since it is possible to precisely pinpoint what MBSE elements the corresponding sensor are observing (e.g., bearing temperature of a centrifugal pump). Task is much harder for textual data since the information contained in issue or maintenance reports needs to “be understood” by a computational tool. Here we called this process as “knowledge extraction”. Once again, we borrow the experience in the medical field where methods to extract knowledge from textual data have been developed in the past decade. The missing element for us is the availability of a complete dictionary of NPP related concepts (in addition to the MBSE models presented earlier) that can put “text into context”. In FY23, such dictionary has been developed along with all the computational elements required for knowledge extraction. Lastly, once numeric and textual ER data elements have been processed and “understood”, then the last step is the discovery of possible cause-effect relations among them. This is performed by observing if a logical connection through the MBSE models exists, and if the

97 MATHEMATICS AND COMPUTING↗

Gene-Based Detection of Microorganisms in Environmental Samples Using PCR

Contaminating microorganisms pose a serious potential risk to the crew's well being and water system integrity aboard the International Space Station (ISS). We are developing a gene-based microbial monitor that functions by replicating specific segments of DNA as much as 10(exp 12) x. Thus a single molecule of DNA can be replicated to detectable levels, and the kinetics of that molecule's accumulation can be used to determine the original concentration of specific microorganisms in a sample. Referred to as the polymerase chain reaction (PCR), this enzymatic amplification of specific segments of the DNA or RNA from contaminating microbes offers the promise of rapid, sensitive, quantitative detection and identification of bacteria, fungi, viruses, and parasites. We envision a small instrument capable of assaying an ISS water sample for 48 different microbes in a 24 hour period. We will report on both the developments in the chemistry necessary for the PCR assays to detect microbial contaminants in ISS water, and on progress towards the miniaturization and automation of the instrumentation.

Glass, John I.↗

Scalable graphene sensor array for real-time toxins monitoring in flowing water

Abstract Risk management for drinking water often requires continuous monitoring of various toxins in flowing water. While they can be readily integrated with existing water infrastructure, two-dimensional (2D) electronic sensors often suffer from device-to-device variations due to the lack of an effective strategy for identifying faulty devices from preselected uniform devices based on electronic properties alone, resulting in sensor inaccuracy and thus slowing down their real-world applications. Here, we report the combination of wet transfer, impedance and noise measurements, and machine learning to facilitate the scalable nanofabrication of graphene-based field-effect transistor (GFET) sensor arrays and the efficient identification of faulty devices. Our sensors were able to perform real-time detection of heavy-metal ions (lead and mercury) and E. coli bacteria simultaneously in flowing tap water. This study offers a reliable quality control protocol to increase the potential of electronic sensors for monitoring pollutants in flowing water.

47 OTHER INSTRUMENTATION↗

Global Cost and Weight Evaluation of Fuselage Side Panel Design Concepts

This report documents preliminary design trades conducted under NASA contracts NAS1 18889 (Advanced Technology Composite Aircraft Structures, ATCAS) and NAS1-19349 (Task 3, Pathfinder Shell Design) for a subsonic wide body commercial aircraft fuselage side panel section utilizing composite materials. Included in this effort were (1) development of two complete design concepts, (2) generation of cost and weight estimates, (3) identification of technical issues and potential design enhancements, and (4) selection of a single design to be further developed. The first design concept featured an open-section stringer stiffened skin configuration while the second was based on honeycomb core sandwich construction. The trade study cost and weight results were generated from comprehensive assessment of each structural component comprising the fuselage side panel section from detail fabrication through airplane final assembly. Results were obtained in three phases: (1) for the baseline designs, (2) after global optimization of the designs, and (3) the results anticipated after detailed design optimization. A critical assessment of both designs was performed to determine the risk associated with each concept, that is the relative probability of achieving the cost and weight projections. Seven critical technical issues were identified as the first step towards side panel detailed design optimization.

Polland, D. R.↗

System Health and Status Reporting is Used to Improve Infrastructure Systems at the Hanford Site - 20449

Reliable physical infrastructure systems are vital to completing the clean-up mission and the start-up and commissioning of new nuclear waste processing facilities at the Hanford Site. Key infrastructure systems at Hanford include water, sewer, and electrical utilities, roads, telecommunications/network systems, and fire systems. All of the infrastructure systems are non-nuclear, General Service systems that are being maintained under formal engineering configuration control and none are specifically credited in any documented safety analysis (DSA). Starting in calendar year 2017, the Hanford Site's infrastructure and services contractor started producing system health and status reports for a total of 15 critical infrastructure systems as means to get a better understanding of each system's health and how it could be improved to ensure better and more reliable service delivery. As the reporting, tracking, and use of the metrics has matured, the number of systems for which reports are being developed has been expanded to a total of 23. Each of the critical infrastructure systems are assigned primary and alternate design authorities that complete qualifications on each assigned system. The design authorities actively manage and maintain configuration control on each of their systems and track metrics associated with availability, maintenance (corrective and preventive), and configuration of the technical baseline. The metrics are based on the principles established in Chapter V of DOE O 420.1C, Facility Safety, [1] and have been tailored as appropriate to each of the key infrastructure systems. An overall assessment of system health is performed and documented on a routine basis (e.g., quarterly). Included in this documentation is a quantitative score for each of the metrics (i.e., availability, maintenance, configuration management) along with results of system walk-downs, description of any permanent design modifications, identification of new or emerging issues and vulnerabilities affecting the system, and an assessment by the design authority of actions necessary to improve the system health score. The overall status scores are calculated using a formula and based on a pre-determined grading scale, a color is assigned for simple presentation. The information gained from developing the reports is being used to (1) assist with making timely and better informed decisions through the use of solid technical bases that are increasing the overall reliability and capabilities of the Site's infrastructure systems as new expense and capital projects in the Reliability Projects Investment Portfolio (RPIP) are prioritized and executed; (2) feed the risk management program, and (3) integrate the technical content of Master Plans that describe the Site's needs for the system and the system's capabilities to meet those future needs. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Aviation Safety Concerns for the Future

The Future Aviation Safety Team (FAST) is a multidisciplinary international group of aviation professionals that was established to identify possible future aviation safety hazards. The principle was adopted that future hazards are undesirable consequences of changes, and a primary activity of FAST became identification and prioritization of possible future changes affecting aviation. Since 2004, FAST has been maintaining a catalogue of "Areas of Change" (AoC) that could potentially influence aviation safety. The horizon for such changes is between 5 to 20 years. In this context, changes must be understood as broadly as possible. An AoC is a description of the change, not an identification of the hazards that result from the change. An ex-post analysis of the AoCs identified in 2004 demonstrates that changes catalogued many years previous were directly implicated in the majority of fatal aviation accidents over the past ten years. This paper presents an overview of the current content of the AoC catalogue and a subsequent discussion of aviation safety concerns related to these possible changes. Interactions among these future changes may weaken critical functions that must be maintained to ensure safe operations. Safety assessments that do not appreciate or reflect the consequences of significant interaction complexity will not be fully informative and can lead to inappropriate trade-offs and increases in other risks. The FAST strongly encourages a system-wide approach to safety risk assessment across the global aviation system, not just within the domain for which future technologies or operational concepts are being considered. The FAST advocates the use of the "Areas of Change" concept, considering that several possible future phenomena may interact with a technology or operational concept under study producing unanticipated hazards.

emerging risks↗

Lunar Water ISRU Measurement Study (LWIMS): Establishing a Measurement Plan for Identification and Characterization of a Water Reserve

NASA’s Artemis program aims to achieve a sustainable lunar presence by 2028. To carry out sustained crewed surface operations, In-Situ Resource Utilization (ISRU), which would use lunar resources (e.g., water) to produce mission consumables, will be critical. Water-bearing materials have been identified at both lunar poles, butthe nature and extent of this resource is not well understood. Identification of the presence of water alone is not adequate for ISRU architecture planning and engineering design. The Lunar Water ISRU Measurement Study (LWIMS) assessed and defined the type, amount, and fidelity of the information and measurements needed to select mining locations for lunar water ISRU and to define requirements for ISRU hardware and architecture development. Current ISRU requirements were used to define a water ‘reserve’ in this context. A measurement plan to achieve these goals includes three key elements; a predictive ‘water favorability’ model to identify and map potential deposits, continued assessment of orbital data, and three types of landed missions to make direct ground measurements. Corresponding mission scenarios and instrument suites will depend on risk posture and timelines for ISRU implementation.

In situ resource utilization↗

Roadmap to Iodine and Mercury Abatement Materials Selection in Nuclear Waste Processing Off-Gas Streams

This work provides a guide for candidate mercury (Hg) and iodine-129 (129I) abatement material identification, screening, evaluation, technical gap identification, and bench-scale testing prioritization while also conceptualizing a materials deployment roadmap for implementation of new materials in the Hanford Waste Treatment and Immobilization Plant (WTP) Low-Activity Waste (LAW) Facility at Hanford in Richland, Washington, and elsewhere in the U.S. Department of Energy (DOE) complex for similar applications. The study was prompted by the need to replace the Kombisorb BAT-37 due to uncertainties in Hg and 129I capture performance and future availability for use in the WTP LAW Facility secondary off-gas system, specifically the Carbon Adsorber units. However, replacement of this material could also mitigate two other issues with Kombisorb BAT-37 (and its successor BAT II 37): (1) fire safety risk due to exothermic heat generated by adsorption reactions between the carbon material and Hg and (2) the risk of low retention of 129I in glass and subsequent downstream impacts on secondary liquid waste treatment at the Effluent Treatment Facility.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Integrating Resilience Planning in Distribution System Planning

Electric utilities, regulators, and stakeholders face increasing risks of severe storms, freezes, floods, and heat waves damaging grid infrastructure and causing power outages—and increasing risks of utility equipment igniting wildfires. At the same time, customer electricity rates have risen substantially in recent years, due in part to replacing aging infrastructure and improving resilience to natural hazards and physical threats. To address these challenges, utilities are beginning to move beyond traditional, siloed planning processes to balance resilience with other fundamental grid objectives such as affordability, reliability, safety, and serving new loads. This study presents a framework for states and utilities that want to advance integration of resilience and distribution planning processes to improve planning efficiency, better prioritize cost-effective grid expenditures, and balance planning objectives. The framework includes 7 key integration points between these planning processes: -Strategy process -Data -Threat assessments -Solution identification and prioritization -Optimization opportunities -Consideration of other grid needs -Metrics Lawrence Berkeley National Laboratory reviewed utility distribution system plans and interviewed subject matter experts to identify emerging practices for each of the 7 integration points. This report presents these practices, which can be used as a guide toward more holistic planning and cohesive investment strategies. It also includes 3 case studies to provide practical examples of how utilities apply such integrated planning processes: two pole hardening programs and one microgrid planning effort. The report concludes by identifying opportunities for future research.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Fuel Cell Airframe Integration Study for Short-Range Aircraft: Aircraft Propulsion and Subsystems Integration Evaluation - Volume 1

The objective of this study is to define the functionality and evaluate the propulsion and power system benefits derived from a Solid Oxide Fuel Cell (SOFC) based Auxiliary Power Unit (APU) for a future short range commercial aircraft, and to define the technology gaps to enable such a system. United Technologies Corporation (UTC) Integrated Total Aircraft Power System (ITAPS) methodologies were used to evaluate a baseline aircraft and several SOFC architectures. The technology benefits were captured as reductions of the mission fuel burn, life cycle cost, noise and emissions. As a result of the study, it was recognized that system integration is critical to maximize benefits from the SOFC APU for aircraft application. The mission fuel burn savings for the two SOFC architectures ranged from 4.7 percent for a system with high integration to 6.7 percent for a highly integrated system with certain technological risks. The SOFC APU itself produced zero emissions. The reduction in engine fuel burn achieved with the SOFC systems also resulted in reduced emissions from the engines for both ground operations and in flight. The noise level of the baseline APU with a silencer is 78 dBA, while the SOFC APU produced a lower noise level. It is concluded that a high specific power SOFC system is needed to achieve the benefits identified in this study. Additional areas requiring further development are the processing of the fuel to remove sulfur, either on board or on the ground, and extending the heat sink capability of the fuel to allow greater waste heat recovery, resolve the transient electrical system integration issues, and identification of the impact of the location of the SOFC and its size on the aircraft.

Gummalla, Mallika↗

Cleanroom Microbes Survive Drying, Vacuum, and Proton Irradiation

Introduction : The goal of planetary protection at NASA is to mitigate the risk of contaminating sensitive target bodies with biological life. While many cleaning procedures have been put in place to reduce bioburden on spacecraft, microbes are experts at evolving to survive harsh conditions. Specifically, the dry, low-nutrient environment of a cleanroom (commonly used for assembly of spacecraft) can represent an environment where extremophiles can survive. Methods : Scientists at NASA MSFC wished to gather a snapshot of the microbial population within a variety of cleanrooms on site. A study was undertaken to collect air, surface, and floor samples from clean-rooms and isolate unique morphologies. From this study, 95 isolates were collected and saved in a microbial library. About 86% of these were identified at least to a genus level. Following identification, 24 microbes were selected, based on a literature review, as potential extremophiles. These were grown in liquid cultures, diluted to a set optical density, washed with water, and then applied to a sterilized Kapton coupon. Droplets were allowed to dry overnight in a biosafety cabinet. Coupons were then installed in a pelletron and pumped down to high vacuum (~1E-6 Torr). Samples were then subjected 100 keV protons at a fluence of 2x10 15 p+/cm 2 up to 4x10 15 p+/cm 2 . Following exposure, samples were returned to the microbiology lab where they were pro-cessed by submerging in water, vortexing, and then plating either droplets or spread plates. Recovery data collected was qualitative with a ranking or +, minor, or – for growth. Some selected radiotolerant strains were sequenced using the Illumina sequencing platform. The resulting genomes were annotated with the Rapid Annotations using Subsystems Technology (RAST) server and analyzed for conserved and unique stress response relevant genomic signatures to identify clues related to specific tolerances. Results and Discussion : After five rounds of proton radiation, we narrowed our isolates to five, non-spore forming bacteria that demonstrated survival: Arthrobacter koreensis, Paenarthrobacter nitroguajacolicus, Mycetocola manganoxydans , and an Erwinia sp. Furthermore, we exposed these four microbes to 254 nm wavelength light at an intensity of 80 W/m 2 at a distance of ~18 cm for 10 minutes. Only A. koreensis demonstrated survival following UV exposure. Finally, we performed whole genome sequencing on the four strains to look for genetic markers of stress resistance. When we compared the genomes of the four strains, we found that genes coding for GGDEF and EAL domains with PAS/PAC sensors were only found in A. koreensis . These domains, modulated by PAS/PAC sensors, are hypothesized to facilitate survival under drying, desiccation, and proton irradiation. Drying and Desiccation : PAS domains sense hydration changes and modulate GGDEF and EAL domain activity to adjust c-di-GMP levels, enhancing resistance to desiccation. For instance, in Pseudomonas aeruginosa , the PAS domain of RbdA modulates activity under varying hydration conditions, affecting stress responses [1]. Proton Irradiation : Proton irradiation causes oxidative stress, leading to ROS generation. PAS domains detect this stress and modulate GGDEF and EAL domains to manage oxidative stress responses. In Shewanella , EAL domain proteins modulated by PAS sensors help bacteria adapt to extreme conditions [2]. These genes upregulate other stress response genes, protecting membrane function, protein stability, DNA repair, and antioxidant defenses. The modulation of c-di-GMP by PAS domains is crucial for bacterial adaptation to stress conditions, enabling dynamic physio-logical adjustments [3]. Understanding these mechanisms provides insights into bacterial stress responses and strategies for controlling bacterial growth [4]. Conclusions : These findings indicate that clean-rooms harbor extremophile microbes that may be able to survive conditions in deep space. Furthermore, while we identified certain stress-response genes that may be at least partly responsible for the phenotypes observed in this study, there are likely unidentified genes or characteristics about A. koreensis , and other bacteria, that may allow them to survive in harsh environments. Future studies will focus on identifying these unknown genes and characteristics, further elucidating the mechanisms of extremophile survival and potentially informing the development of new biotechnologies for space exploration and other extreme environments.

Chelsi Cassilly↗

Ares-I-X Stability and Control Flight Test: Analysis and Plans

The flight test of the Ares I-X vehicle provides a unique opportunity to reduce risk of the design of the Ares I vehicle and test out design, math modeling, and analysis methods. One of the key features of the Ares I design is the significant static aerodynamic instability coupled with the relatively flexible vehicle - potentially resulting in a challenging controls problem to provide adequate flight path performance while also providing adequate structural mode damping and preventing adverse control coupling to the flexible structural modes. Another challenge is to obtain enough data from the single flight to be able to conduct analysis showing the effectiveness of the controls solutions and have data to inform design decisions for Ares I. This paper will outline the modeling approaches and control system design to conduct this flight test, and also the system identification techniques developed to extract key information such as control system performance (gain/phase margins, for example), structural dynamics responses, and aerodynamic model estimations.

Brandon, Jay M.↗

Complex Decision-Making Applications for the NASA Space Launch System

The Space Shuttle program is ending and elements of the Constellation Program are either being cancelled or transitioned to new NASA exploration endeavors. NASA is working diligently to select an optimum configuration for the Space Launch System (SLS), a heavy lift vehicle that will provide the foundation for future beyond LEO large ]scale missions for the next several decades. Thus, multiple questions must be addressed: Which heavy lift vehicle will best allow the agency to achieve mission objectives in the most affordable and reliable manner? Which heavy lift vehicle will allow for a sufficiently flexible exploration campaign of the solar system? Which heavy lift vehicle configuration will allow for minimizing risk in design, test, build and operations? Which heavy lift vehicle configuration will be sustainable in changing political environments? Seeking to address these questions drove the development of an SLS decisionmaking framework. From Fall 2010 until Spring 2011, this framework was formulated, tested, fully documented, and applied to multiple SLS vehicle concepts at NASA from previous exploration architecture studies. This was a multistep process that involved performing FOM-based assessments, creating Pass/Fail gates based on draft threshold requirements, performing a margin-based assessment with supporting statistical analyses, and performing sensitivity analysis on each. This paper discusses the various methods of this process that allowed for competing concepts to be compared across a variety of launch vehicle metrics. The end result was the identification of SLS launch vehicle candidates that could successfully meet the threshold requirements in support of the SLS Mission Concept Review (MCR) milestone.

Lyles, Garry↗

Designing to Sample the Unknown: Lessons from OSIRIS-REx Project Systems Engineering

On September 8, 2016, the third NASA New Frontiers mission launched on an Atlas V 411. The Origins, Spectral Interpretation, Resource Identification, Security-Regolith Explorer (OSIRIS-REx) will rendezvous with asteroid Bennu in 2018, collect a sample in 2020, and return that sample to Earth in September 2023. The development team has overcome a number of challenges in order to design and build a system that will make contact with an unexplored, airless, low-gravity body. This paper will provide an overview of the mission, then focus in on the system-level challenges and some of the key system-level processes. Some of the lessons here are unique to the type of mission, like discussion of operating at a largely-unknown, low-gravity object. Other lessons, particularly from the build phase, have broad implications. The OSIRIS-REx risk management process was particularly effective in achieving an on-time and under-budget development effort. The systematic requirements management and verification and the system validation also helped identify numerous potential problems. The final assessment of the OSIRIS-REx performance will need to wait until the sample is returned in 2023, but this post-launch assessment will capture some of the key systems-engineering lessons from the development team.

Asteroid↗

Smart Semi-Supervised Accumulation of Large Repositories for Industrial Control Systems Device Information

Industrial Control Systems device manufacturers frequently add new features to improve their product performance. Oftentimes, these changes are mainly vendor-driven initiatives, and customers may not be aware of the full impact of these new capabilities on their cybersecurity posture. In the energy sector, this can lead to considerable dissonance between vendor-provided cybersecurity claims and a customer’s responsibility for Operation Technology cybersecurity compliance. Thus, the resulting dynamic verification burden is shifted towards the customer and may pose a significant cybersecurity risk to the energy sector landscape. We found that there is very limited research into cybersecurity auditing for Operational Technology. However, a solution is needed for vetting the vendor-supplied feature claims and their adherence to cybersecurity requirements and standards. We are presently engaged in an effort to develop such a system. This paper demonstrates one vital aspect of this effort in proposing an end-to-end framework to accumulate a large repository of ICS device information for this vetting system, curate the dataset, and conduct extensive processing. This framework is designed to use web scraping, data analytics and Natural Language Processing (NLP) techniques to identify vendor websites, automate the collection of website-accessible documents and automatically derive metadata from them for identification of product documents relevant to the repository. We have found that this automated approach to vendor identification, document extraction into a product repository, and NLP pre-processing is unique and has not been previously presented in the literature. The preliminary work shows that this is feasible and can produce reliable results with minimum supervision. Future work will be built upon this foundation in order to achieve semi-supervised vetting of device technical information – a vital capability for ensuring that vendor-claimed device cybersecurity capabilities match industry requirements.

Ameri, Kimia↗

The Need for Analogue Missions in Scientific Human and Robotic Planetary Exploration

With the increasing challenges of planetary missions, and especially with the prospect of human exploration of the moon and Mars, the need for earth-based mission simulations has never been greater. The current focus on science as a major driver for planetary exploration introduces new constraints in mission design, planning, operations, and technology development. Analogue missions can be designed to address critical new integration issues arising from the new science-driven exploration paradigm. This next step builds on existing field studies and technology development at analogue sites, providing engineering, programmatic, and scientific lessons-learned in relatively low-cost and low-risk environments. One of the most important outstanding questions in planetary exploration is how to optimize the human and robotic interaction to achieve maximum science return with minimum cost and risk. To answer this question, researchers are faced with the task of defining scientific return and devising ways of measuring the benefit of scientific planetary exploration to humanity. Earth-based and spacebased analogue missions are uniquely suited to answer this question. Moreover, they represent the only means for integrating science operations, mission operations, crew training, technology development, psychology and human factors, and all other mission elements prior to final mission design and launch. Eventually, success in future planetary exploration will depend on our ability to prepare adequately for missions, requiring improved quality and quantity of analogue activities. This effort demands more than simply developing new technologies needed for future missions and increasing our scientific understanding of our destinations. It requires a systematic approach to the identification and evaluation of the categories of analogue activities. This paper presents one possible approach to the classification and design of analogue missions based on their degree of fidelity in ten key areas. Various case studies are discussed to illustrate the approach.

Snook, K. J.↗