SEARCH · Search NASA

Results for “Risk-informed Systems Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

All sources NASA NTRS DOE OSTI

NASA NTRS2012

An Altair Overview: Designing a Lunar Lander for 21st Century Human Space Exploration

Altair, the lunar lander element of NASA's Constellation program, was conducted in a different design environment than many other NASA projects of similar scope. Because of this relatively unique approach, there are a number of significant success stories that should be considered during the development of any future lunar landers or human spacecraft. This paper is divided into two separate themes; the first is the approach used during the conceptual design studies, including the systematic analysis cycles and the decision making process associated with each: and the second is a summary of the resulting lessons learned that were compiled after looking back at the lifetime of the Project. Altair was terminated before entering Phase B of its design, and was often criticized for being a very heavy and very large vehicle. While there was specific rationale for all of the decisions that led up to that configuration, future design cycles were specifically planned to re-address the mass challenge. Had the project continued, the deliberate, stepwise design process would have converged on an optimized lander design that balanced mass, risk, cost and capabilities. Some of the specific items that will be addressed in this paper include project development strategy, organizational approach and team dynamics, risk-informed design process, mission architecture constraints, mission key driving requirements, model-based systems engineering process, configuration studies, contingency considerations, subsystem overviews and key trade studies. The paper will conclude with a summary of the lessons identified during the Altair project and make suggestions for application to future studies.

Brown, Kendall K.↗

NASA NTRS2015

NASA System Safety Handbook. Volume 2: System Safety Concepts, Guidelines, and Implementation Examples

This is the second of two volumes that collectively comprise the NASA System Safety Handbook. Volume 1 (NASASP-210-580) was prepared for the purpose of presenting the overall framework for System Safety and for providing the general concepts needed to implement the framework. Volume 2 provides guidance for implementing these concepts as an integral part of systems engineering and risk management. This guidance addresses the following functional areas: 1.The development of objectives that collectively define adequate safety for a system, and the safety requirements derived from these objectives that are levied on the system. 2.The conduct of system safety activities, performed to meet the safety requirements, with specific emphasis on the conduct of integrated safety analysis (ISA) as a fundamental means by which systems engineering and risk management decisions are risk-informed. 3.The development of a risk-informed safety case (RISC) at major milestone reviews to argue that the systems safety objectives are satisfied (and therefore that the system is adequately safe). 4.The evaluation of the RISC (including supporting evidence) using a defined set of evaluation criteria, to assess the veracity of the claims made therein in order to support risk acceptance decisions.

Safety Case↗

NASA NTRS2016

Assurance of Fault Management: Risk-Significant Adverse Condition Awareness

Fault Management (FM) systems are ranked high in risk-based assessment of criticality within flight software, emphasizing the importance of establishing highly competent domain expertise to provide assurance for NASA projects, especially as spaceflight systems continue to increase in complexity. Insight into specific characteristics of FM architectures seen embedded within safety- and mission-critical software systems analyzed by the NASA Independent Verification Validation (IVV) Program has been enhanced with an FM Technical Reference (TR) suite. Benefits are aimed beyond the IVV community to those that seek ways to efficiently and effectively provide software assurance to reduce the FM risk posture of NASA and other space missions. The identification of particular FM architectures, visibility, and associated IVV techniques provides a TR suite that enables greater assurance that critical software systems will adequately protect against faults and respond to adverse conditions. The role FM has with regard to overall asset protection of flight software systems is being addressed with the development of an adverse condition (AC) database encompassing flight software vulnerabilities.Identification of potential off-nominal conditions and analysis to determine how a system responds to these conditions are important aspects of hazard analysis and fault management. Understanding what ACs the mission may face, and ensuring they are prevented or addressed is the responsibility of the assurance team, which necessarily should have insight into ACs beyond those defined by the project itself. Research efforts sponsored by NASAs Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs, and allowing queries based on project, mission type, domain component, causal fault, and other key characteristics. The repository has a firm structure, initial collection of data, and an interface established for informational queries, with plans for integration within the Enterprise Architecture at NASA IVV, enabling support and accessibility across the Agency. The development of an improved workflow process for adaptive, risk-informed FM assurance is currently underway.

Software Verification & Validation↗

NASA NTRS2017

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

NASA NTRS2017

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification Validation (IVV) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASA's Office of Safety and Mission Assurance defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domaincomponent, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IVV enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

Fault management↗

NASA NTRS2014

An Integrated Reliability and Physics-Based Risk Modeling Approach for Assessing Human Spaceflight Systems

This paper presents an integrated reliability and physics-based risk modeling approach for assessing human spaceflight systems. The approach is demonstrated using an example, end-to-end risk assessment of a generic-crewed space transportation system during a reference mission to the International Space Station. The behavior of the system is modeled using analysis techniques from multiple disciplines in order to properly capture the dynamic time- and state- dependent consequences of failures encountered in different mission phases. We discuss how to combine traditional reliability analyses with Monte Carlo simulation methods and physics-based engineering models to produce loss-of- mission and loss-of-crew risk estimates supporting risk-based decision-making and requirement verification. This approach facilitates risk-informed design by providing more realistic representation of system failures and interactions; identifying key risk-driving sensitivities, dependencies, and assumptions; and tracking multiple figures of merit within a single, responsive assessment framework that can readily incorporate evolving design information throughout system development.

Risk assessment↗

NASA NTRS2014

Comparative Analysis of Static and Dynamic Probabilistic Risk Assessment

Implementation of risk-informed design allows the design team to thoroughly explore the risks of a system while iterating the operations concept, design, and requirements until the system meets mission objects and is achievable within constraints. To arrive at a space system design that is likely to meet all constraints placed upon mass, cost, performance and risk, the system requirements must be understood and traded against each other as early as the conceptual design phase. Depending on the project phase and the goals of the risk analysis, various PRA methodologies could be used to produce quantitative risk estimates to enable such a process. In order to better understand the applicability, advantages, and limitations of various PRA methodologies, a comparative analysis of three bottom-up, component-based PRA approaches was performed. The three methods examined are a traditional static fault tree, a fault tree hybrid, and a dynamic Monte Carlo simulation. Each approach was used to assess a generic reaction control system (RCS) thruster pod and mission. The methods are assessed in terms of the process of modeling a system, the actionable information produced for the design team, and the overall fidelity of the quantitative risk evaluation generated. The paper also discusses the applicability of each methodology to the different phases of system development.

Probablistic↗

NASA NTRS2018

NASA’s Mid-Atlantic Communities and Areas at Intensive Risk Demonstration: Translating Compounding Hazards to Societal Risk

Remote sensing provides a unique perspective on our dynamic planet, tracking changes and revealing the course of complex interactions. Long term monitoring and targeted observation combine with modeling and mapping to provide increased awareness of hydro-meteorological and geological hazards. Disasters often follow hazards and the goal of NASA’s Disasters Program is to look at the earth as a highly coupled system to reduce risk and enable resilience. Remote sensing and geospatial science are used as tools to help answer critical questions that inform decisions. Data is not the same as information, nor does understanding of processes necessarily translate into decision support for disaster preparedness, response and recovery. Accordingly, NASA is engaging the scientific and decision-support communities to apply remote sensing, modeling, and related applications in Communities and Areas at Intensive Risk (CAIR). In 2017, NASA’s Applied Sciences Disasters Program hosted a regional workshop to explore these issues with particular focus on coastal Virginia and North Carolina. The workshop brought together partners in academia, emergency management, and scientists from NASA and partnering federal agencies to explore capabilities among the team that could improve understanding of the physical processes related to these hazards, their potential impact to changing communities, and to identify methodologies for supporting emergency response and risk mitigation. The resulting initiative, the mid-Atlantic CAIR project, demonstrates the ability to integrate satellite derived earth observations and physical models into actionable, trusted knowledge. Severe storms and associated storm surge, sea level rise, and land subsidence coupled with increasing populations and densely populated, aging critical infrastructure often leave coastal regions and their communities extremely vulnerable. The integration of observations and models allow for a comprehensive understanding of the compounding risk experienced in coastal regions and enables individuals in all positions make risk-informed decisions. This initiative uses a representative storm surge case as a baseline to produce flood inundation maps. These maps predict building level impacts at current day and for sea level rise (SLR) and subsidence scenarios of the future in order to inform critical decisions at both the tactical and strategic levels. To accomplish this analysis, the mid-Atlantic CAIR project brings together Federal research activities with academia to examine coastal hazards in multiple ways: 1) reanalysis of impacts from 2011 Hurricane Irene, using numerical weather modeling in combination with coastal surge and hydrodynamic, urban inundation modeling to evaluate combined impact scenarios considering SLR and subsidence, 2) remote sensing of flood extent from available optical imagery, 3) adding value to remotely sensed flood maps through depth predictions, and 4) examining coastal subsidence as measured through time-series analysis of synthetic aperture radar observations. Efforts and results are published via ArcGIS story maps to communicate neighborhoods and infrastructure most vulnerable to changing conditions. Story map features enable time-aware flood mapping using hydrodynamic models, photographic comparison of flooding following Hurricane Irene, as well as visualization of heightened risk in the future due to SLR and land subsidence.

Rogers, Laura↗

NASA NTRSDate not supplied

Risk Assessment of Obstacle Collision for UAVs under Off-nominal Conditions

Enabling operations of unmanned aerial vehicles (UAVs) in low-altitude airspace demands the need of robust risk monitoring framework for assessing the safety of airspace, ground structures and people. As widespread applications emerge, the need of risk assessment becomes increasingly important for UAV flights beyond visual line-of-sight, especially subjected to off-nominal conditions introduced by component failures, degraded controllability or environmental disturbances such as wind gusts in an urban canyon. From a safety perspective, collision with obstacles can be detrimental not only to the vehicle and payload, but also to the structure and people on ground. Although it is safe to assume that approved UAVs would be equipped with collision avoidance systems, risk of collision which can be predicted for a flight trajectory even before the UAV encounters any obstacle is beneficial to resolve contingencies in its decision-making under off-nominal conditions. In this paper, a framework is presented for computing the risk of collision with obstacle based on a UAV’s predicted trajectory, proximity to static and dynamic obstacles, sub-system state-of-health and external wind conditions. The conditional probability of trajectory deviation is generated using a Bayesian Belief Network (BBN) based on on-board sensor measurements. Further, a kinematic 3-DOF model is implemented to compute deviation in UAV’s trajectory subjected to one case study of off-nominal condition i.e. wind gusts. Finally, the integrated risk factor is demonstrated on real data from experimental flights of an octocopter at NASA Langley Research Center, in presence of simulated obstacles and wind conditions. The proposed approach would enable risk-informed decision making process for timely mitigation of current and future unsafe events.

Bayesian network↗

NASA NTRSDate not supplied

3D Representation of UAV-obstacle Collision Risk Under Off-nominal Conditions

Safe operations of autonomous unmanned aerial vehicles (UAVs) in low-altitude airspace with beyond visual line-of-sight (BVLOS) flights demand robust risk monitoring of airspace as well as of people and property on ground. One of the safety critical factors for UAV flights is the risk of collision with static and dynamic obstacles in proximity to its flight path. This paper presents a detailed formulation of risk of obstacle collision incorporating the effects of off-nominal conditions introduced by component failures, degraded controllability and environmental disturbances such as wind gusts. The risk is represented in terms of a matrix with rows corresponding to the likelihood of occurrence of collision and columns representing severity of collision to the vehicle and surrounding structures. Risk likelihood is generated using a Bayesian Belief Network (BBN) that compiles knowledge from related Failure Modes and Effects Analysis (FMEAs) and Subject Matter Experts (SMEs) to determine the probability of collision based on on-board sensor measurements indicative of vehicle health and controllability. Risk severity is computed utilizing a point-mass 3D kinematic model of the vehicle in presence of wind. The proposed risk factor is demonstrated on real flight data from experimental flights of an octocopter at NASA Langley Research Center in presence of simulated obstacles and wind conditions. Effect of varying wind conditions, level of controllability and obstacle measurement noise on the risk factor is demonstrated. The proposed approach enables risk-informed decision making for timely mitigation of current and future unsafe events in autonomous systems.

risk analysis↗

NASA NTRSDate not supplied

Exploration Medical Capability Science and Research Overview and Update

The mission of the Exploration Medical Capability (ExMC) Element is to advance medical system design and risk-informed decision making for exploration beyond Low Earth Orbit to promote human health and performance in space. To accomplish this mission, ExMC focuses on several key areas: • Investigating specific risks that are relevant for human exploration spaceflight, including in-flight medical conditions, degraded or toxic medications, and renal stones • Developing medical probabilistic risk analysis tools that are integrated with systems engineering processes to inform the medical system trade space and support the development of robust requirements • Demonstrating and defining requirements for a prototype clinical decision support system • Developing and demonstrating novel medical technologies that will improve future medical capabilities in space This presentation will focus on selected scientific and technical conceptual drivers for the Element and its current and future research risks and gaps while providing an overview of the Element’s progress in 2021 and areas of focus for 2022.

Benjamin Easter↗

NASA NTRS2020

Electromagnetic Compatibility Test and Analysis Campaign of NASA's Mars 2020 Rover Final Submission

NASA's Mars 2020 Perseverance Rover—with a launch window opening July 2020, and landing expected February 2021—has mission objectives to look for evidence of habitability, seek biosignatures of past life, collect and cache samples for possible future return to Earth, and prepare for future human missions to Mars. The Rover platform is similar to the previous Mars Science Laboratory (MSL) “Curiosity” rover that landed in 2012 but contains a new suite of scientific instruments and upgrades to existing functionality: seven new and/or upgraded scientific payloads, an upgraded arm and sampling system, and a Helicopter demonstration. These changes—along with new efficiency goals to operate more Rover subsystems concurrently and thus collect more science—presented new electromagnetic compatibility (EMC) challenges. In this paper, we will describe the campaign to ensure Mars 2020 mission success from an electromagnetic environment perspective: 1) confirming existing MSL heritage subsystems and EMC requirements were compatible with the new Mars 2020 mission objectives, 2) engaging with engineers and scientists early in the project to identify and evaluate risks before hardware assembly and performing ambitious risk reduction tests, 3) undertaking a comprehensive subsystem qualification test program based on tailored MIL-STD-461F requirements, occasionally leading to redesign, 4) synthesizing the data collected to perform detailed analyses toward the goal of making risk-informed decisions at a system level. The spacecraft successfully completed all three planned system level tests, demonstrating self-compatibility with minimal impact to operations from electromagn

Gonzales, Edward C↗

NASA NTRS2020

Electromagnetic Compatibility Test and Analysis Campaign of NASA's Mars 2020 Rover

NASA's Mars 2020 Rover—with a launch window opening July 2020, and landing expected February 2021—has mission objectives to look for evidence of habitability, seek biosignatures of past life, collect and cache samples for possible future return to Earth, and prepare for future human missions. The Rover platform is similar to the previous Mars Science Laboratory (MSL) “Curiosity” rover that landed in 2012 but contains a new suite of scientific instruments and upgrades to existing functionality. The scientific payload includes a trio of chemical analysis tools (PIXL, SHERLOC, SuperCam), a ground penetrating radar (RIMFAX), an upgraded weather station (MEDA), upgraded high resolution camera (MastCam-Z), and an oxygen-producing experiment (MOXIE). These changes—along with new efficiency goals to operate more Rover subsystems concurrently and thus collect more science—presented new electromagnetic compatibility (EMC) challenges. In this paper, we will describe the campaign to ensure Mars 2020 mission success from an electromagnetic environment perspective: 1) confirming existing MSL heritage subsystems and EMC requirements were compatible with the new Mars 2020 mission objectives, 2) engaging with engineers and scientists early in the project to identify and evaluate risks before hardware assembly and performing ambitious risk reduction tests, 3) undertaking a comprehensive subsystem qualification test program based on tailored MIL-STD-461F requirements, occasionally leading to redesign, 4) synthesizing the data collected to perform detailed analyses toward the goal of making risk-informed decisions at a system level. The spacecraft has successfully completed all three planned system level tests, demonstrating self-compatibility with minimal impact to operations from electromagnetic interference in all mission phases.

Gonzales, Edward C↗

NASA NTRS2023

Exploration Medical Capability Science and Research Overview and Update

The mission of the Exploration Medical Capability (ExMC) Element is to advance medical system design and risk-informed decision making for exploration beyond low Earth orbit to promote human health and performance in space. In order to accomplish this mission, the Element takes a progressively Earth-independent approach to three main areas: - Answering key clinical and science research questions that will help to address the challenges of providing medical care in the extreme environment of space - Applying systems engineering processes to medical system design with the goal of developing robust requirements that can be fully integrated into future space exploration vehicle designs - Developing and demonstrating novel medical technologies that will improve future medical capabilities in space This presentation will focus on selected scientific and technical conceptual drivers for the Element, the current and future research risks and gaps, and provide an overview of the Element’s progress in 2022. In particular, it will address the ongoing effort for the IMPACT trade space analysis tool suite, the closeout work on a clinical decision support prototype, potential requirements for a long-duration lunar orbit and lunar surface medical system, and an International Space Station technology demonstration of a point-of-care laboratory analysis capability.

Kris Lehnhardt↗

NASA NTRSDate not supplied

Gateway Program Safety and Mission Assurance Integration - the Future of Safe Deep Space Human Exploration

As a foundational element of the National Aeronautics and Space Administration (NASA) Artemis Campaign, the Gateway is an incrementally built cislunar spacecraft that will serve as a platform for deep space human exploration, science, and technology demonstration. The Gateway will be a unifying catalyst for international partners around the world to establish sustained deep space scientific investigations, lunar surface access, and missions to Mars. As human exploration moves farther away from Earth, spacecraft designs must prioritize and optimize mass and volume allocations, while minimizing human and spacecraft risk. To accomplish this objective, the Gateway Program Safety and Mission Assurance functions develop, implement, and ensure compliance with requirements, in concert with the accurate characterization and transparent communication of residual hazard risks, for integrated safety, reliability and maintainability and quality assurance. Safety and Mission Assurance was a key contributor during Gateway program pre-formulation and formulation activities where safety and reliability analysis was embedded in the Gateway Systems Engineering and Integration team. During these early program stages, a preliminary Gateway Integrated Hazard Analysis and Preliminary Gateway Probabilistic Risk Assessment assisted in Gateway architectural and operational definition as part of a risk-informed design process. As the deep space architecture has matured, the integrated Safety and Mission Assurance analyses have matured, new safety review processes have been developed, and requirements have been refined to ensure compliance with integrated safety and mission assurance objectives. The Gateway Program is currently concluding the preliminary design review informed milestone, where the primary objectives included: - Ensured completeness and consistency of the preliminary design, including the meeting of all requirements within appropriate margins and acceptable risk posture. - Identification of any major issues moving forward to the Critical Design phase. At this milestone, Safety and Mission Assurance provided numerous products, including Gateway Top Risks and Risk Mitigation Plans, updated integrated hazard analyses, updated probabilistic risk assessment, Crew Survival Analysis Report, and updated Safety and Mission Assurance Requirements and Plans. These products provide a many-faceted perspective on the inherent risk and available mitigations involved in flying the current proposed vehicle design and anticipated stack configurations. In addition, Safety and Mission Assurance identified top technical, process and workforce concerns to be addressed as the program progresses toward the critical design phase. This paper will detail the evolution of the Gateway Program Safety and Mission Assurance integration functions, provide its current status and lessons learned for future human spaceflight programs. Throughout this paper the key tenets of the Gateway Program Safety and Mission Assurance will be discussed: - Application of a risk-informed approach to identify and mitigate areas of highest risk. - Leverage of valuable processes and lessons learned from earlier spaceflight programs. - Development of Safety and Mission Assurance products to inform design risk trades. - Utilization of common Safety and Mission Assurance practices to identify safety risks for multiple perspectives: top-down, bottom-up, and across lines of integration. - Approval of safety hazards at the appropriate level of authority, keeping most deliberation closest to design expertise and elevating risks of greatest concern for program-level consideration. - Championing of Safety and Mission Assurance processes and forums to foster a pervasive safety culture that is transparent, inclusive, and collaborative between all partners. These tenets have allowed the Gateway Safety and Mission Assurance function to play a key role in optimized vehicle design evolution, and early identification and mitigation of Gateway program and Artemis mission risk.

Helen Vaccaro↗

NASA NTRSDate not supplied

Ground Risk Informed Operational Planning for Small Unmanned Aerial Systems

Increasing quantities of small Unmanned Aerial Systems (sUAS) operations present many challenges in terms of safe adoption and integration into existing airspace. The ability to study and quantify the risk to third parties on the ground prior to flight is an important step toward enabling Beyond Visual Line of Sight (BVLOS) operations. The Ground Risk Assessment Service Provider (GRASP) software is a capability developed by NASA to assist with third-party risk quantification and risk-informed flight planning. In this paper, two nominal flight paths intended to represent an infrastructure inspection mission are evaluated using the software to demonstrate its utility. A method is also introduced for adding other NASA-developed capabilities into a single architecture to assess a broader set of operational risks associated with BVLOS operations. These capabilities include a navigation system performance prediction tool, a high fidelity vehicle dynamics model, high resolution wind field data, and other information pertinent to operators. Data produced by these capabilities are combined to enable use of the Performance Based Navigation (PBN) concept borrowed from conventional aviation, providing quantified flight path uncertainty for where the sUAS is likely to be relative to its nominal flight plan. Ground risk is assessed within this region of uncertainty, giving a higher level of confidence in the solution compared to an analysis of only the nominal flight path.

Ground Risk↗

DOE OSTI2023

Risk-Informed Condition Evaluation of Solar-centered Energy Generation and Distribution Networks through Bayesian Learning and Inference

We develop a methodology based on Bayesian inference over Probabilistic Graphical Models (PGMs) to understand and quantify risk in solar-centered grids using targeted measurements and learned system behavior. Being non-prescriptive but, rather, able to infer system behavior and, ultimately, address risk queries from data, our machine learning-type paradigm is tailored for diverse topologies and threat scenarios often associated with distributed energy generation and photovoltaic distributed energy resources (PV-DERs) in particular. We describe algorithmic processes for: (i) learning the structure of PGMs that result from attack-prone PV-DER-proliferated distribution systems, (ii) quantifying cause-effect relationships, and (iii) evaluating risk queries based on diverse evidence. The contributions are illustrated on a residential grid subject to output impairment attacks on its PV-DER infrastructure.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

An Evaluation of The Dynamic Physical Security Risk Assessment Methodology for Fleet-Wide Applications

The requirements for U.S. nuclear power plants to maintain a large onsite physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This integrated process for physical security analysis is named Modeling and Analysis for Safety Security using Dynamic EMRALD Framework (MASS-DEF). This document provides an update on the progress in applying the MASS-DEF process to an operating commercial nuclear power plant as well as additional industry feedback regarding use of the tool for other physical security risk-informed topics. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, and integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5 or MAAP. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report is an update the progress of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report also provides an update to the procedural guidance for the MASS-DEF process and an overview of the generic models available for use by utilities. This report does not contain any plant’s sensitive information and/or safeguards information. This study’s purpose was to verify that the results achieved using generic models are similar to actual plant results and refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗