Search NASA⌕ Search

SEARCH · Search NASA

Results for “Hazard Categorization”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Major Achievements of the Springfields Decommissioning Program - 16512

Since the 1940's, Springfields has manufactured fuel products for the UK's nuclear power stations and for international customers. The early operations were in support of the atomic weapons program, closely followed by fuel manufacture for electricity generation via the Magnox power stations commencing in the late 1950's. In 2005, responsibility for the assets and liabilities of Springfields was transferred to the Nuclear Decommissioning Authority (NDA). A new company, Springfields Fuels Limited, was created to run the site, which was managed and operated by Westinghouse Electric UK Ltd on the NDA's behalf. On April 1, 2010, Westinghouse entered into an agreement with the NDA for a long-term lease of the Springfields site, which transferred responsibility for the commercial fuel manufacturing business and Springfields Fuels Limited to Westinghouse. Today, the main Springfields activities include: - Oxide fuels for Advanced Gas-cooled and Light Water Reactors, as well as intermediate fuel products, such as powders, granules and pellets, - Manufacture of Uranium Hexafluoride (now in Care and Maintenance), - Processing and recovery of Uranium residues, - Decommissioning and demolition of redundant plants and buildings. Some 120 plant buildings and support facilities have been successfully decommissioned and demolished in the period 1996 to date. These range from 1940's buildings, subsequently converted for nuclear fuel manufacture, together with some of the formerly sealed chemical agent manufacture and storage facilities. Decommissioning of the now redundant Magnox manufacturing facilities is ongoing at Springfields without compromising the other site operations. Westinghouse is managing all activities related to the whole lifecycle, planning, design, safety case, radiation protection, Post Operational Clean Out (POCO), service diversions, characterization, decommissioning all phases through to ground remediation, waste disposal and agreed end states. Decommissioning of process plants starts with the removal of the majority of radiological activity or hazard contained within the plant. This is known as Post Operational Clean Out. Once this is complete, the plant may be dismantled. Work is scoped and defined within packages (at plant or cell level) to aid control and commercial monitoring as the decommissioning is progressed. This package approach also enables clean or lightly contaminated items to be removed separately to aid potential re-cycling and minimize decontamination and waste disposal costs. Westinghouse is further optimising work package delivery by planning parallel POCO and Decommissioning work phases within plant at a cell level to systematically remove redundant plant and reduce hazard earlier, whilst optimising use of both internal and external resources to reduce total project cost. Waste and Residues from all phases are disposed of via authorized disposal routes and in accordance with our environmental authorizations. On completion of decommissioning and removal of plant and equipment the building is re-assessed radiologically, categorized and appropriate remediation work progressed to render it safe for conventional demolition. The major elements of the success achieved to date can be attributed to the following elements: - Overall programme management with extensive experience of planning, cost, and risk management. Integration of the programme within a major commercial site without compromising safety or operations. - Complete site EHS management working within a complex regulatory framework including the Nuclear Site Licenses, Environmental Authorisations and Security requirements. - Avoiding safety complacency by use of rigorous and systematic process to emphasise safety over competing goals. Including structured use of Human Performance and Corrective Action and Learning processes. - Unique safety experiences attained through complex hazard reduction across a broad range of uranium manufacturing and chemical hazard/agent facilities. - Project leadership and excellence utilizing a core site team to deploy repeatable processes and safe practices to deliver complex scope within budget and schedule. - Optimised use of internal and external resources, with extensive use of Operating Experience to drive continuous improvement and problem resolution. - Management of Contractors from initial selection, pre-qualification, tender assessment and Performance using varied contract forms across delivery phases. - Use of Westinghouse expertise for safety case, waste management, uranium recovery, health physics and design. - Implementation of a work package to ensure gated discreet manageable packages. Underpinned by package specific method statements, with appropriate hold points to maintain management and control of the works. - Continuous local safety focus via safety planning, induction, plant specific training, proactive risk assessment, and a defined approach to decoupling operating plant safety cases enabling focussed and usable documentation. This paper will provide an overview of the latest decommissioning activities achieved on the Springfields site and will focus on best practices that allowed Westinghouse to maintain the program on time and on budget. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Incidence and predictors of tuberculosis among children receiving antiretroviral therapy in the Wolaita Zone: A retrospective cohort study

Tuberculosis is the leading cause of morbidity and mortality among children living with the human immunodeficiency virus (HIV), mainly in sub-Saharan Africa, including Ethiopia. Tuberculosis remains a significant health concern for HIV-positive children in Ethiopia. There is a paucity of data on the incidence and predictors of tuberculosis among children living with HIV on antiretroviral therapy in the Wolaita zone. Hence, this study aimed to assess the incidence and predictors of tuberculosis among children living with HIV on antiretroviral therapy in the Wolaita zone between January 2010 to December 2020. A retrospective cohort study was conducted among 389 children receiving antiretroviral therapy in Wolaita zone health facilities between January 2010 to December 2020. The checklist was adapted from the standardized antiretroviral treatment (ART) follow-up form currently used by the institutions’ ART clinics. The Kaplan-Meier survival function and Log-rank were used to estimate the survival for each categorical variable to compare the survival between different exposure groups. Both bivariable and multivariable parametric survival Gompertz models were fitted to identify predictors of tuberculosis among HIV-positive children. The association was summarized using an adjusted hazard ratio (AHR), and statistical significance was declared at 95% CI and p-value < 0.05. The goodness of the model fit was assessed using a Cox-Snell residual plot. The incidence rate of tuberculosis among children living with HIV was 3.5 (95% CI 2.7–4.5) per 100 child years. World Health Organization clinical stage III or IV (AHR = 2.31, 95% CI [1.26, 4.22]), hemoglobin level <10 g/dL (AHR = 2.87, 95% CI [1.51, 5.45]), fair or poor ART adherence (AHR = 4.4, 95% CI[2.18, 9.05]), underweight (AHR = 2.55, 95% CI [1.45, 4.51]), age >10 years (AHR = 3.62; 95% CI [1.29, 10.0]), and cotrimoxazole preventive therapy (AHR = 0.23; 95% CI [0.08, 0.60]) were among the independent predictors of TB occurrence. The incidence of tuberculosis among children on ART was high. HIV-positive children presenting with advanced disease staging (III and IV), anemia, “fair” and “poor” ART adherence, underweight, age above ten years, and not receiving cotrimoxazole preventive therapy were at higher risk of TB. Therefore, counseling on ART adherence, early diagnosis, and prompt treatment of anemia and malnutrition are recommended to avert tuberculosis.

60 APPLIED LIFE SCIENCES↗

An Integrated Decision-Making Model for Categorizing Weather Products and Decision Aids

The National Airspace System s capacity will experience considerable growth in the next few decades. Weather adversely affects safe air travel. The FAA and NASA are working to develop new technologies that display weather information to support situation awareness and optimize pilot decision-making in avoiding hazardous weather. Understanding situation awareness and naturalistic decision-making is an important step in achieving this goal. Information representation and situation time stress greatly influence attentional resource allocation and working memory capacity, potentially obstructing accurate situation awareness assessments. Three naturalistic decision-making theories were integrated to provide an understanding of the levels of decision making incorporated in three operational situations and two conditions. The task characteristics associated with each phase of flight govern the level of situation awareness attained and the decision making processes utilized. Weather product s attributes and situation task characteristics combine to classify weather products according to the decision-making processes best supported. In addition, a graphical interface is described that affords intuitive selection of the appropriate weather product relative to the pilot s current flight situation.

Elgin, Peter D.↗

Examination of Icing Induced Loss of Control and Its Mitigations

Factors external to the aircraft are often a significant causal factor in loss of control (LOC) accidents. In today s aviation world, very few accidents stem from a single cause and typically have a number of causal factors that culminate in a LOC accident. Very often the "trigger" that initiates an accident sequence is an external environment factor. In a recent NASA statistical analysis of LOC accidents, aircraft icing was shown to be the most common external environmental LOC causal factor for scheduled operations. When investigating LOC accident or incidents aircraft icing causal factors can be categorized into groups of 1) in-flight encounter with super-cooled liquid water clouds, 2) take-off with ice contamination, or 3) in-flight encounter with high concentrations of ice crystals. As with other flight hazards, icing induced LOC accidents can be prevented through avoidance, detection, and recovery mitigations. For icing hazards, avoidance can take the form of avoiding flight into icing conditions or avoiding the hazard of icing by making the aircraft tolerant to icing conditions. Icing detection mitigations can take the form of detecting icing conditions or detecting early performance degradation caused by icing. Recovery from icing induced LOC requires flight crew or automated systems capable of accounting for reduced aircraft performance and degraded control authority during the recovery maneuvers. In this report we review the icing induced LOC accident mitigations defined in a recent LOC study and for each mitigation describe a research topic required to enable or strengthen the mitigation. Many of these research topics are already included in ongoing or planned NASA icing research activities or are being addressed by members of the icing research community. These research activities are described and the status of the ongoing or planned research to address the technology needs is discussed

Reehorst, Andrew L.↗

Electromagnetic field interactions with the human body: Observed effects and theories

The effects of nonionizing electromagnetic (EM) field interactions with the human body were reported and human related studies were collected. Nonionizing EM fields are linked to cancer in humans in three different ways: cause, means of detection, and effective treatment. Bad and benign effects are expected from nonionizing EM fields and much more knowledge is necessary to properly categorize and qualify EM field characteristics. It is concluded that knowledge of the boundary between categories, largely dependent on field intensity, is vital to proper future use of EM radiation for any purpose and the protection of the individual from hazard.

Raines, J. K.↗

Which Criteria Applied in Multi-Phasic CT Can Predict Early Tumor Response in Patients with Hepatocellular Carcinoma Treated Using Conventional TACE: RECIST, mRECIST, EASL or qEASL?

PurposeOur study aimed to evaluate quantitative tumor response assessment (quantitative EASL-[qEASL]) on computed tomography (CT) images in patients with hepatocellular carcinoma (HCC) treated using conventional transarterial chemoembolization (cTACE), compared to existing 1-dimensional and 2-dimensional methods (RECIST, mRECIST, EASL).Materials and MethodsIn this IRB-approved, single-institution retrospective cohort study, 52 consecutive patients with intermediate-stage HCC were consecutively included. All patients underwent contrast-enhanced CT scan at baseline and 4 weeks after cTACE.ResultsMedian follow-up period was 13.5 months (range 1.2–54.1). RECIST, mRECIST and EASL identified progression in 2 (4%), 1 (2%) and 1 (2%) patients, respectively, whereas qEASL identified 10 (19%) patients. qEASL was the only tumor response method able to predict survival among different tumor response groups (P < 0.05), whereas RECIST, mRECIST and EASL did not (P > 0.05). Both EASL and qEASL were able to identify responders and non-responders and were predictive of survival (P < 0.05). Multivariate analysis showed that progression was an independent predictor of overall survival with hazard ratio of 1.9 (P = 0.025). Patients who demonstrated progression with qEASL had significantly shorter survival than those with non-progression (7.6 vs. 20.4 months, P = 0.012). Similar multivariate analysis using RECIST, mRECIST and EASL could not be performed because too few patients were categorized as progressive disease.ConclusionqEASL could be applied on CT images to assess tumor response following cTACE and is a more sensitive biomarker to predict survival and identify tumor progression than RECIST, mRECIST and EASL at an early time point.Level of EvidenceLevel 2a, retrospective cohort study.

62 RADIOLOGY AND NUCLEAR MEDICINE↗

Lessons Learned in Designing A Proposed Ultraviolet Sterilization System for Space

This paper presents a number of lessons learned while designing a proposed sterilization system for Mars Sample Return. This sterilization system is needed to inactivate any potentially hazardous Mars material on the exterior surface of the vessel containing sealed sample tubes filled with Mars rock cores, regolith and atmosphere. These returned samples would provide information on the geologic history of Mars, the evolution of its climate and the potential for ancient life. Mars Sample Return is categorized at Planetary Protection Category V Restricted Earth Return, so it is required to protect the Earth–Moon system from the biological impact of returning samples from Mars to Earth. This article reviews lessons learned in the development of a particular engineering implementation to support the protection of the Earth–Moon biosphere: the use of in situ ultraviolet LED illumination. The details of the biological efficacy of this approach or the policy-related impacts are outside of the scope of this manuscript. The lessons learned presented here include establishing design requirements for the system, the selection of a light source, optical design options, contamination control and approaches to thermal and power management.

Planetary Protection↗

Risk Assessment of Hydrogen Fuel Cell Electric Vehicles in Tunnels

The need to understand the risks and implications of traffic incidents involving hydrogen fuel cell electric vehicles in tunnels is increasing in importance with higher numbers of these vehicles being deployed. A risk analysis was performed to capture potential scenarios that could occur in the event of a crash and provide a quantitative calculation for the probability of each scenario occurring, with a qualitative categorization of possible consequences. The risk analysis was structured using an event sequence diagram with probability distributions on each event in the tree and random sampling was used to estimate resulting probability distributions for each end-state scenario. Here, the most likely consequence of a crash is no additional hazard from the hydrogen fuel (98.1–99.9% probability) beyond the existing hazards in a vehicle crash, although some factors need additional data and study to validate. These scenarios include minor crashes with no release or ignition of hydrogen. When the hydrogen does ignite, it is most likely a jet flame from the pressure relief device release due to a hydrocarbon fire (0.03–1.8% probability). This work represents a detailed assessment of the state-of-knowledge of the likelihood associated with various vehicle crash scenarios. This is used in an event sequence framework with uncertainty propagation to estimate uncertainty around the probability of each scenario occurring.

33 ADVANCED PROPULSION SYSTEMS↗

Portrait and Classification of Individual Haze Particulates

Haze (known as “Mai” in Chinese) threatens the health of billions of people across the globe. To begin solving this problem without severely slowing down the economy, one has to mechanistically and geographically pinpoint the sources of these pollutants, the key of which is to thoroughly characterize and fingerprint the particulates. Here we present a broad survey and classification of thousands of individual airborne particu-lates by using the Scanning Electron Microscope (SEM) to measure their diverse mor-phologies and chemistries, which could eventually be organized into a “haze finger-print database”. For instance, one collection in Xi’an City, China during March-April 2014 yielded 494 airborne particulates that settled on silicon wafers placed outside the window of a 3rd floor office. These 494 particulates were manually imaged with high resolution (down to 2 nm), elementally mapped using Energy-dispersive X-ray Spec-troscopy (EDS), and were identified and categorized into presumed source classes such as construction activities (Ca, Al, Si-O), coal burning (sulfates), biologic (pollen, bac-teria), automotive, mining, steel making, and etc. About 20% of the particulates have mysterious origins, as it is still unclear how they were formed, and a fraction of them contained clearly hazardous elements such as lead and chromium. For future work, we propose using unmanned aerial vehicles with a special “rolling film” substrate that can autonomously collect airborne particulates, a customized SEM auto-imaging system, and machine learning software to establish an online open-access database. The end goal would be to monitor and analyze the particulate pollutants that are pumped into our atmosphere every day, and precisely track down their sources so we can better model and police the quality of the air around us.

54 ENVIRONMENTAL SCIENCES↗

Methodology for Designing Fault-Protection Software

A document describes a methodology for designing fault-protection (FP) software for autonomous spacecraft. The methodology embodies and extends established engineering practices in the technical discipline of Fault Detection, Diagnosis, Mitigation, and Recovery; and has been successfully implemented in the Deep Impact Spacecraft, a NASA Discovery mission. Based on established concepts of Fault Monitors and Responses, this FP methodology extends the notion of Opinion, Symptom, Alarm (aka Fault), and Response with numerous new notions, sub-notions, software constructs, and logic and timing gates. For example, Monitor generates a RawOpinion, which graduates into Opinion, categorized into no-opinion, acceptable, or unacceptable opinion. RaiseSymptom, ForceSymptom, and ClearSymptom govern the establishment and then mapping to an Alarm (aka Fault). Local Response is distinguished from FP System Response. A 1-to-n and n-to- 1 mapping is established among Monitors, Symptoms, and Responses. Responses are categorized by device versus by function. Responses operate in tiers, where the early tiers attempt to resolve the Fault in a localized step-by-step fashion, relegating more system-level response to later tier(s). Recovery actions are gated by epoch recovery timing, enabling strategy, urgency, MaxRetry gate, hardware availability, hazardous versus ordinary fault, and many other priority gates. This methodology is systematic, logical, and uses multiple linked tables, parameter files, and recovery command sequences. The credibility of the FP design is proven via a fault-tree analysis "top-down" approach, and a functional fault-mode-effects-and-analysis via "bottoms-up" approach. Via this process, the mitigation and recovery strategy(s) per Fault Containment Region scope (width versus depth) the FP architecture.

Barltrop, Kevin↗

Formation of Zeolites Responsible for Waste Glass Rate Acceleration: An Experimental and Computational Study for Understanding Thermodynamic and Kinetic Processes

Before nuclear waste glasses can be disposed at geological disposal facilities, a performance assessment (PA) must be conducted to provide confidence to the regulators and public that the release rates of radioisotopes and hazardous materials into the environment are below the regulatory limits. Because the release rate of radionuclides is directly related to the dissolution rate of the radionuclide-containing glass, the corrosion behavior of the glass must be well understood for the disposal site lifetime. For simplicity, glass dissolution in static conditions has been categorized into three different stages, referred to as initial rate (Stage I), residual rate (Stage II) and, depending upon the secondary phases formed, a possible delayed resumption in the alteration rate (Stage III). The last of these stages is the least understood and has the possibility to drive radionuclide release rates above regulatory thresholds.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Carbon Storage Planning Inquiry Tool (CS PlanIT)

The CS PlanIT provides stakeholders with easy access to geographically explore, query, and evaluate multiple data layers for a user-defined area of interest, with the goal to accelerate carbon storage resource, feasibility assessments, and planning efforts. The data within CS PlanIT are arranged and categorized to assess each stage of the Carbon Capture and Storage supply chain, from CO2 (Carbon Dioxide) emission sources, critical energy infrastructure (including transport), to CO2 geologic storage and sink locations. Furthermore, stakeholders can gain insights into community and environmental impacts, as CS PlanIT leverages Environmental Justice and Social Justice (EJSJ) and natural hazard datasets. Additionally, documentation in the form of an interactive ArcGIS story map and data catalog are included within the EDX publication to provide user’s information to better understand and explain CS PlanIT’s layout, functions, and associated data sets.

Justman, Devin M.↗

Assurance of Fault Management: Risk-Significant Adverse Condition Awareness

Fault Management (FM) systems are ranked high in risk-based assessment of criticality within flight software, emphasizing the importance of establishing highly competent domain expertise to provide assurance for NASA projects, especially as spaceflight systems continue to increase in complexity. Insight into specific characteristics of FM architectures seen embedded within safety- and mission-critical software systems analyzed by the NASA Independent Verification Validation (IVV) Program has been enhanced with an FM Technical Reference (TR) suite. Benefits are aimed beyond the IVV community to those that seek ways to efficiently and effectively provide software assurance to reduce the FM risk posture of NASA and other space missions. The identification of particular FM architectures, visibility, and associated IVV techniques provides a TR suite that enables greater assurance that critical software systems will adequately protect against faults and respond to adverse conditions. The role FM has with regard to overall asset protection of flight software systems is being addressed with the development of an adverse condition (AC) database encompassing flight software vulnerabilities.Identification of potential off-nominal conditions and analysis to determine how a system responds to these conditions are important aspects of hazard analysis and fault management. Understanding what ACs the mission may face, and ensuring they are prevented or addressed is the responsibility of the assurance team, which necessarily should have insight into ACs beyond those defined by the project itself. Research efforts sponsored by NASAs Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs, and allowing queries based on project, mission type, domain component, causal fault, and other key characteristics. The repository has a firm structure, initial collection of data, and an interface established for informational queries, with plans for integration within the Enterprise Architecture at NASA IVV, enabling support and accessibility across the Agency. The development of an improved workflow process for adaptive, risk-informed FM assurance is currently underway.

Software Verification & Validation↗

History of on-orbit satellite fragmentations

Since the first serious satellite fragmentation occurred in Jun. 1961, and instantaneously increased the total Earth satellite population by more than 400 percent, the issue of space operations within the finite region of space around the Earth has been the subject of increasing interest and concern. The prolific satellite fragmentations of the 1970's and the marked increase in the number of fragmentations in the 1980's served to widen international research into the characteristics and consequences of such events. Plans for large, manned space stations in the next decade and beyond demand a better understanding of the hazards of the dynamic Earth satellite population. The contribution of satellite fragmentations to the growth of the Earth satellite population is complex and varied. The majority of detectable fragmentation debris have already fallen out of orbit, and the effects of 40 percent of all fragmentations have completely disappeared. In this volume, satellite fragmentations are categorized by their assessed nature and to a lesser degree by their effect on the near-Earth space environment. A satellite breakup is the usually destructive disassociation of an orbital payload, rocket body, or structure, often with a wide range of ejecta velocities. A satellite breakup may be accidental or the result of intentional actions, e.g., due to a propulsion system malfunction or a space weapons test, respectively. An anomalous event is the unplanned separation, usually at low velocity, of one or more detectable objects from a satellite which remains essentially intact. Anomalous events can be caused by material deterioration of items such as thermal blankets, protective shields, or solar panels. As a general rule, a satellite breakup will produce considerably more debris, both trackable and non-trackable, than an anomalous event. From one perspective, satellite breakups may be viewed as a measure of the effects of man's activity on the environment, while anomalous events may be a measure of the environment on man-made objects.

Nauer, David J.↗

Near-Earth Object Surveyor Overview

The Near-Earth Object (NEO) Surveyor is designed to detect, categorize and characterize Near-Earth Objects (NEOs) using infrared imaging. The project was approved to enter the preliminary design phase (Phase B) in FY21 after an extended Concept Development Phase (Phase A). The NEO Surveyor project responds to US Public Law 109-155[1], National Research Council’s report “Defending Planet Earth: Near-Earth Object Surveys & Hazard Mitigation Strategies (2010)”[2], the U. S. National Near-Earth Object Preparedness Strategy and Action Plan (June 2018)[3], and the objectives of NASA’s Planetary Defense Coordination Office (PDCO). The goals of the NEO Surveyor project are to: (1) identify impact hazards to the Earth posed by NEOs (defined as asteroids and comets that come within 1.3 AU of the Sun) by performing a comprehensive survey of the NEO population; (2) obtain detailed physical characterization data for individual objects that are likely to pose an impact hazard; (3) characterize the entire population of potentially hazardous NEOs to inform potential mitigation strategies. The mission will make significant progress toward the George E. Brown, Jr. NEO Survey Program objective defined by the U. S. Congress of detecting, tracking, cataloging, and characterizing at least 90% of NEOs equal to or larger than 140 m in diameter. The project is a collaboration between NASA-JPL, the University of Arizona (UA) and industry, with Ball Aerospace notably providing the spacecraft and key instrument elements. This paper will describe the overall NEO Surveyor Project objectives, initial spacecraft and instrument design and development plans and mission concept.

Veto, Michael↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

Toward an Understanding of the Environmental and Public Health Impacts of Unconventional Natural Gas Development: A Categorical Assessment of the Peer-Reviewed Scientific Literature, 2009-2015

The body of science evaluating the potential impacts of unconventional natural gas development (UNGD) has grown significantly in recent years, although many data gaps remain. Still, a broad empirical understanding of the impacts is beginning to emerge amidst a swell of research. The present categorical assessment provides an overview of the peer reviewed scientific literature from 2009–2015 as it relates to the potential impacts of UNGD on public health, water quality, and air quality. We have categorized all available original research during this time period in an attempt to understand the weight and direction of the scientific literature. Our results indicate that at least 685 papers have been published in peer-reviewed scientific journals that are relevant to assessing the impacts of UNGD. 84% of public health studies contain findings that indicate public health hazards, elevated risks, or adverse health outcomes; 69% of water quality studies contain findings that indicate potential, positive association, or actual incidence of water contamination; and 87% of air quality studies contain findings that indicate elevated air pollutant emissions and/or atmospheric concentrations. This paper demonstrates that the weight of the findings in the scientific literature indicates hazards and elevated risks to human health as well as possible adverse health outcomes associated with UNGD. There are limitations to this type of assessment and it is only intended to provide a snapshot of the scientific knowledge based on the available literature. However, this work can be used to identify themes that lie in or across studies, to prioritize future research, and to provide an empirical foundation for policy decisions.

03 NATURAL GAS↗