Search NASA⌕ Search

SEARCH · Search NASA

Results for “identifying security consequences”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

72 records · Page 4

Securing Vehicle Charging Infrastructure

As the US electrifies the transportation sector, cyber attacks targeting vehicle charging could bring consequences to electrical system infrastructure. This is a growing area of concern as charging stations increase power delivery and must communicate to a range of entities to authorize charging, sequence the charging process, and manage load (grid operators, vehicles, OEM vendors, charging network operators, etc.). The research challenges are numerous and are complicated because there are many end users, stakeholders, and software and equipment vendors interests involved. Poorly implemented electric vehicle supply equipment (EVSE), electric vehicle (EV), or grid communication system cybersecurity could be a significant risk to EV adoption because the political, social, and financial impact of cyberattacks - or public perception of such - ripples across the industry and has lasting and devastating effects. Unfortunately, there is no comprehensive EVSE cybersecurity approach and limited best practices have been adopted by the EV/EVSE industry. There is an incomplete industry understanding of the attack surface, interconnected assets, and unsecured interfaces. Thus, comprehensive cybersecurity recommendations founded on sound research are necessary to secure EV charging infrastructure. This project is providing the power, security, and automotive industry with a strong technical basis for securing this infrastructure by developing threat models, determining technology gaps, and identifying or developing effective countermeasures. Specifically, the team is creating a cybersecurity threat model and performing a technical risk assessment of EVSE assets, so that automotive, charging, and utility stakeholders can better protect customers, vehicles, and power systems in the face of new cyber threats.

33 ADVANCED PROPULSION SYSTEMS↗

Application of multi-criteria decision analysis techniques and decision support framework for informing plant select agent designation and decision making

The United States Department of Agriculture (USDA) Division of Agricultural Select Agents and Toxins (DASAT) established a list of biological agents (Select Agents List) that threaten crops of economic importance to the United States and regulates the procedures governing containment, incident response, and the security of entities working with them. Every 2 years the USDA DASAT reviews their select agent list, utilizing assessments by subject matter experts (SMEs) to rank the agents. We explored the applicability of multi-criteria decision analysis (MCDA) techniques and a decision support framework (DSF) to support the USDA DASAT biennial review process. The evaluation includes both current and non-select agents to provide a robust assessment. We initially conducted a literature review of 16 pathogens against 9 criteria for assessing plant health and bioterrorism risk and documented the findings to support this analysis. Technical review of published data and associated scoring recommendations by pathogen-specific SMEs was found to be critical for ensuring accuracy. Scoring criteria were adopted to ensure consistency. The MCDA supported the expectation that select agents would rank high on the relative risk scale when considering the agricultural consequences of a bioterrorism attack; however, application of analytical thresholds as a basis for designating select agents led to some exceptions to current designations. A second analytical approach used agent-specific data to designate key criteria in a DSF logic tree format to identify pathogens of low concern that can be ruled out for further consideration as select agents. Both the MCDA and DSF approaches arrived at similar conclusions, suggesting the value of employing the two analytical approaches to add robustness for decision making.

59 BASIC BIOLOGICAL SCIENCES↗

Real-World Driving Features for Identifying Intelligent Driver Model Parameters

Driver behavior models play a significant role in representing different driving styles and the associated relationships with traffic patterns and vehicle energy consumption in simulation studies. The models often serve as a proxy for baseline human driving when assessing energy-saving strategies that alter vehicle velocity. Such models are especially important in connectivity-enabled energy-saving strategy research because they can easily adapt to changing driving conditions like posted speed limits or change in traffic light state. While numerous driver models exist, parametric driver models provide the flexibility required to represent variability in real-world driving through different combinations of model parameters. These model parameters must be informed by a representative set of parameter values for the driver model to adequately represent a real-world driver. It stands to reason that determining the parameter values from real-world driving data would serve the purpose of representing a real-world driver. Although the published literature is replete with techniques and consequences of using real-world driving data to determine parameter values for parametric driver models, none have explored them in the context of using shorter driving features where the parameter values may change over the course of a single trip for the same driver. In this study we consider the “intelligent driver model” (IDM) as our driver behavior model and use real-world driving data from the Transportation Secure Data Center (TSDC) maintained at the National Renewable Energy Laboratory (NREL). The TSDC includes real-world travel data from across the United States, from which NREL has created a wide range of driving routes consisting of road features such as speed limits, stop locations, and turn locations. The real-world driving data are categorized into different driving regimes and extracted into driving features. The driving features are then used to calibrate the parameter values for the IDM. The distribution of the parameters and the relationships among them are reported. The insights obtained from this study enable judicious usage of IDM or similar parametric driver models to represent baseline human driver behavior in simulations.

27 ARPA - Advanced Research Projects Agency-Energy↗

Real-World Driving Features for Identifying Intelligent Driver Model Parameters: Preprint

Driver behavior models play a significant role in representing different driving styles and the associated relationships with traffic patterns and vehicle energy consumption in simulation studies. The models often serve as a proxy for baseline human driving when assessing energy-saving strategies that alter vehicle velocity. Such models are especially important in connectivity-enabled energy-saving strategy research because they can easily adapt to changing driving conditions like posted speed limits or change in traffic light state. While numerous driver models exist, parametric driver models provide the flexibility required to represent variability in real-world driving through different combinations of model parameters. These model parameters must be informed by a representative set of parameter values for the driver model to adequately represent a real-world driver. It stands to reason that determining the parameter values from real-world driving data would serve the purpose of representing a real-world driver. While the published literature is replete with techniques and consequences of using real-world driving data to determine parameter values for parametric driver models, none have explored them in the context of using shorter driving features where the parameter values may change over the course of a single trip for the same driver. In this study we consider the “Intelligent Driver Model” (IDM) as the driver behavior model to explore and real-world driving data from the Transportation Secure Data Center (TSDC) maintained at the National Renewable Energy Laboratory (NREL). The TSDC includes real-world travel data from across the United States, from which NREL has created a wide range of driving routes consisting of road features such as speed limits, stop locations and turn locations. The real-world driving data are categorized into different driving regimes and extracted into driving features. The driving features are then used to calibrate the parameter values for the IDM. The distribution of the parameters and the relationships among them are reported. The insights obtained from this study enable judicious usage of IDM or similar parametric driver models to represent baseline human driver behavior in simulations.

27 ARPA - Advanced Research Projects Agency-Energy↗

Millimeter Wave Systems for Airports and Short-Range Aviation Communications: A Survey of the Current Channel Models at mmWave Frequencies

Millimeter-wave (mmWave) communications will play a key role in enhancing the throughput, reliability, and security of next generation wireless networks. These advancements are achieved through the large bandwidth available in this band and through the use of highly directional links that will be used to overcome the large pathloss at these frequencies. Although the terrestrial application of mmWave systems is advancing at a rapid pace, the use of mmWave communication systems in aviation systems or airports is still in its infancy. This can be attributed to the challenges related to radio technology and lack of development, and characterization of mmWave wireless channels for the aviation field and the airport environment. Consequently, one of our goals is to develop methodologies that support mmWave air to ground links, and various links at airports, by applying new localization schemes that allow for application of highly directional links that can be deployed over longer distances despite the high path loss at mmWave frequencies. However, a very thorough understanding of the mmWave channel models are needed to enable such new applications. To this end, in this paper, we present a survey of the current channel models in the mmWave band. The 3-dimensional statistical channel model is also reviewed and its parameters and typical characteristics for this model are identified and computed through simulation for the Boise metropolitan area.

air traffic management↗

Safety Basis Compliant Flexible Operations [Capstone Project]

Compliant nuclear operations must be weighed against the radiological risk to the worker, public, and the environment. This project set out to look at one facility at Los Alamos National Laboratory (LANL or the Laboratory) and compare the risk with the operational restrictions associated with the Technical Safety Requirements (TSRs). The hope was to identify controls that could be reduced or simplified while maintaining compliance with 10 CFR 830, Nuclear Safety Management. This would result in increasing facility operational flexibility and efficiency. Controls were identified to be simplified or eliminated based on risk. This identification was initially envisioned from the perspective of reanalysis of the accident and hazard analysis consequences. Additionally, it was envisioned that fire testing could show that the consequences of a fire are not as dramatic as analyzed. Specific facility controls were identified that cause operational inefficiencies. Based on data collection, two controls were identified for further evaluation. The first control was combustible loading within the waste storage buildings, and the second control is related to the seismic power cutoff switch. In evaluating the combustible loading control, the thought is that the fire suppression system (FSS) provides adequate protection and the combustible loading controls do not need elevation to a TSR control. The FSS, along with the Fire Protection Program, would provide protection to prevent a fire from impacting large amounts of stored waste material. The seismic switch was more of a challenge. When reviewing the facility operation, it was determined that the facility does not operate anywhere near the established material-at-risk (MAR – radioactive material) limits. By adjusting these limits, a reduced consequence could be achieved and hence, a significant risk reduction achieved. A new operating mode would be used to achieve this reduction. A reduced MAR limit was successfully used as a test case for snow removal during this project. This project expands on that trial case as related to combustible loading and the seismic power cutoff switch TSRs. This will increase the efficiency of operations with reduced TSR controls while reducing overall facility risk. This is a win-win situation for Triad National Security, LLC (Triad) and the U.S. Department of Energy (DOE). Due to schedule and budgetary constraints, not all envisioned work scope was accomplished. However, it is maintained in this report for future efforts.

61 RADIATION PROTECTION AND DOSIMETRY↗

RAMSeS: Rapid Analysis of Mission Software Systems

Over the past few decades, software has become ubiquitous as it has been integrated into nearly every aspect of society, including household appliances, consumer electronics, industrial control systems, public utilities, government operations, and military systems. Consequently, many critical national security questions can no longer be answered convincingly without understanding software, including its purpose, its capabilities, its flaws, its communication, or how it processes and stores data. As software continues to become larger, more complex, and more widespread, our ability to answer important mission questions and reason about software in a timely way is falling behind. Today, to achieve such understanding of third-party software, we rely predominantly on the ability of reverse engineering experts to manually answer each particular mission question for every software system of interest. This approach often requires heroic human effort that nevertheless fails to meet current mission needs and will never scale to meet future needs. The result is an emerging crisis: a massive and expanding gap between the national security need to answer mission questions about software and our ability to do so. Sandia National Laboratories has established the Rapid Analysis of Mission Software Systems (RAMSeS) effort, a collaborative long-term effort aimed at dramatically improving our nation’s ability to answer mission questions about third-party software by growing an ecosystem of tools that augment the human reverse engineer through automation, interoperability, and reuse. Focusing on static analysis of binary programs, we are attempting to identify reusable software analysis components that advance our ability to reason about software, to automate useful aspects of the software analysis process, and to integrate new methodologies and capabilities into a working ecosystem of tools and experts. We aim to integrate existing tools where possible, adapt tools when modest modifications will enable them to interoperate, and implement missing capability when necessary. Although we do hope to automate a growing set of analysis tasks, we will approach this goal incrementally by assisting the human in an ever-widening range of tasks.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Investigating the Impact of Irrigation on Malaria Vector Larval Habitats and Transmission Using a Hydrology‐Based Model

Abstract A combination of accelerated population growth and severe droughts has created pressure on food security and driven the development of irrigation schemes across sub‐Saharan Africa. Irrigation has been associated with increased malaria risk, but risk prediction remains difficult due to the heterogeneity of irrigation and the environment. While investigating transmission dynamics is helpful, malaria models cannot be applied directly in irrigated regions as they typically rely only on rainfall as a source of water to quantify larval habitats. By coupling a hydrologic model with an agent‐based malaria model for a sugarcane plantation site in Arjo, Ethiopia, we demonstrated how incorporating hydrologic processes to estimate larval habitats can affect malaria transmission. Using the coupled model, we then examined the impact of an existing irrigation scheme on malaria transmission dynamics. The inclusion of hydrologic processes increased the variability of larval habitat area by around two‐fold and resulted in reduction in malaria transmission by 60%. In addition, irrigation increased all habitat types in the dry season by up to 7.4 times. It converted temporary and semi‐permanent habitats to permanent habitats during the rainy season, which grew by about 24%. Consequently, malaria transmission was sustained all‐year round and intensified during the main transmission season, with the peak shifted forward by around 1 month. Lastly, we evaluated the spatiotemporal distribution of adult vectors under the effect of irrigation by resolving habitat heterogeneity. These findings could help larval source management by identifying transmission hotspots and prioritizing resources for malaria elimination planning.

60 APPLIED LIFE SCIENCES↗

Repository-Scale Performance Assessment Incorporating Postclosure Criticality

A key objective of the United States Department of Energy’s (DOE) Office of Nuclear Energy’s Spent Fuel and Waste Science and Technology Campaign is to better understand the technical basis, risks, and uncertainty associated with the safe and secure disposition of spent nuclear fuel (SNF) and high-level radioactive waste. Commercial nuclear power generation in the United States has resulted in thousands of metric tons of SNF, the disposal of which is the responsibility of the DOE (Nuclear Waste Policy Act of 1982, as amended). Any repository licensed to dispose of SNF must meet requirements regarding the long-term performance of that repository. For an evaluation of the long-term performance of the repository, one of the events that may need to be considered is the SNF achieving a critical configuration during the postclosure period. Of particular interest is the potential behavior of SNF in dual-purpose canisters (DPCs), which are currently licensed and being used to store and transport SNF but were not designed for permanent geologic disposal. A study has been initiated to examine the potential consequences, with respect to long-term repository performance, of criticality events that might occur during the postclosure period in a hypothetical repository containing DPCs. The first phase (a scoping phase) consisted of developing an approach to creating the modeling tools and techniques that may eventually be needed to either include or exclude criticality from a performance assessment (PA) as appropriate; this scoping phase is documented in Price et al. (2019a). In the second phase, that modeling approach was implemented and future work was identified, as documented in Price et al. (2019b). This report gives the results of a repository-scale PA examining the potential consequences of postclosure criticality, as well as the information, modeling tools, and techniques needed to incorporate the effects of postclosure criticality in the PA.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

The evolution of the Human Systems and Simulation Laboratory in nuclear power research

The events at Three Mile Island in the United States brought about fundamental changes in the ways that simulation would be used in nuclear operations. The need for research simulators was identified to scientifically study human-centered risk and make recommendations for process control system designs. This paper documents the human factors research conducted at the Human Systems and Simulation Laboratory (HSSL) since its inception in 2010 at Idaho National Laboratory. The facility’s primary purposes are to provide support to utilities for system upgrades and to validate modernized control room concepts. In the last decade, however, as nuclear industry needs have evolved, so too have the purposes of the HSSL. Thus, beyond control room modernization, human factors researchers have evaluated the security of nuclear infrastructure from cyber adversaries and evaluated human-in-the-loop simulations for joint operations with an integrated hydrogen generation plant. Lastly, our review presents research using human reliability analysis techniques with data collected from HSSL-based studies and concludes with potential future directions for the HSSL, including severe accident management and advanced control room technologies.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Secure Route: Roadway Risk Mapping for Transportation Planners

The secure transport of sensitive materials across U.S. road networks pose unique challenges for local, state, and federal agencies. Threats range from random events (e.g., accidents, medical emergencies, mechanical failures) to opportunistic or organized tactical assaults. Although the probability of such attacks is very low, the consequences of material loss to foreign states or terrorists can be catastrophic, qualifying these scenarios as “grey swan” events—low-probability, high-impact occurrences that are predictable but difficult to quantify. Traditional risk assessments struggle in these contexts, necessitating a shift toward subjective risk perception to inform planning. Risk perception in transport planning is shaped by various factors, including knowledge of adversarial capabilities, vehicle defenses, manifest details, and geographic features along the route. Geographic features such as bridges, tunnels, roadside elevation, and gaps in cellular coverage introduce vulnerabilities, while mitigative features include safe havens, police stations, and medical services. Temporal variables such as congestion, accidents, and weather further complicate route planning. Despite their importance, existing routing tools like Google Maps and commercial software do not explicitly account for geographic risk features, requiring planners to rely on personal familiarity with routes—a time-intensive, non-scalable approach. This work addresses these gaps by: (1) developing datasets that catalog geographic risk features along U.S. roadways, (2) eliciting risk perceptions from experienced transportation security experts, and (3) linking these perceptions to roadway conditions and geographic data. We implement these capabilities within Secure Route a novel mapping tool for classifying route segment risks associated with roadway conditions. This system provides transportation planners with an intuitive interface to assess and contextualize risk along potential routes, improving decision-making for secure transport. We present current progress in this effort and identify next steps.

Stewart, Robert [ORNL] (ORCID:0000000281867559)↗

ARCADE Analysis Methods & Validation Pathway

The Advanced Reactor Cyber Analysis and Development Environment (ARCADE) provides an automated analysis system which supports risk-informed performance based (RIPB) evaluations of nuclear control systems. Every possible cyber threat which could lead to consequence is identified by simulating the unsafe control action sequences which transform digital harm into physical harm. Eliminating the simulation of complex digital cyber attack chains cuts out unnecessary computational overhead and focuses directly on the physics of cyber-physical attacks. This focus enables designers to make informed decisions which can entirely eliminate categories of cyber threats against advanced reactors through the physical nature of the plant design. This narrowing of cyber threat against nuclear power plants through the physics of the system is intended to make any remaining threat management and cost efficient. This is the goal of the Tiered Cyber Analysis (TCA) outlined in NRC Draft Regulation Guide (RG) 5.96, which provides a RIPB cybersecurity approach for new reactors. ARCADE has been custom developed to meet the demands of the rigorous analysis required in Tier 1 of the TCA, which forms the foundation of the TCA process. Currently, ARCADE is still under development, but has made significant leaps in capability. A pilot analysis on the opensource Asherah simulator was performed which demonstrated key functionality goals. The next stage of ARCADE development involves improvements to the applications which support the analysis system, and enabling the analysis system to utilize the full suite of unsafe control action simulations. Since the analysis method’s core functions are complete, validation of the analysis method will be started concurrent to the next development stages. The automated analysis ARCADE will provide can radically change the cybersecurity design process for advanced reactors, reducing the cost of security implementation while enhancing cyber resilience. The pathway for ARCADE’s development to this goal has become much clearer. The majority of technical hurdles have been cleared, and the remaining development needs have been solidified. ARCADE is now capable of assisting the advanced reactor design process and directly support advanced reactor industry RIPB practices.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Addressing Consequence within Operational Risk: An Approach for Understanding an Organization’s Unique Infrastructure Environment

The endeavor of tackling operational risk focused on consequences is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure landscape in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure landscape as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space.

99 GENERAL AND MISCELLANEOUS↗

Risk-informed Physical Security Using Dynamic Force-on-Force Modelling Tools (ABSTRACT)

Physical security requirement of nuclear power plants (NPPs) in the US is regulated in a mainly prescriptive manner. This “one size fits all” approach may consequently overlook plant-specific characteristics which are beneficial for the inherent safety and security of the plant. Although a performance-based security measure has been promulgated in 10 CFR 73.55(r), current evaluation methods generally emphasize static and conservative assumptions on physical security uncertainties. This conservatism contributes to the overall operational and maintenance costs, which account to 70% of total operating expenditures for an NPP. This paper describes an ongoing work at the Idaho National Laboratory within the Light Water Reactor Sustainability pathway, which aims to optimize physical protection system with regards to system effectiveness and dollar costs. To achieve this goal, a risk-informed approach to physical security is proposed. This approach leverages the Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool to model facility infiltration and Force-on-Force (FoF) engagement in a dynamic manner. The dynamic FoF analysis was conducted by coupling human performance uncertainties modeled in EMRALD to existing commercial 3-dimensional FoF software, i.e. SCRIBE3D, AVERT and Simajin. Meanwhile, risk analysis was accomplished by coupling the attack outcomes to existing plant Probabilistic Risk Assessment (PRA) model with FLEX strategy. This approach reduces the conservatisms in security modeling and further acknowledges the possibility for plant operators to mitigate the attack outcomes. A sabotage attack on a hypothetical NPP facility was devised to demonstrate the proposed methodology. Dynamic FoF rules were implemented in EMRALD coupled to SCRIBE3D. This dynamic evaluation revealed an additional 21% system effectiveness in protecting the target set relative to the static modelling approach. Furthermore, the conditional core damage probability could be reduced by up to 46% by crediting operator actions in mitigating the sabotage outcomes. We evaluated the relative importance of each component of the physical security posture included in the model and assessed tradeoffs between components to identify potential opportunities for cost reduction while maintaining a specific level of system effectiveness. Results of the cost analysis will be presented in the conference. This study is expected to help NPP operators in allocating resources optimally to satisfy the security requirements.

97 MATHEMATICS AND COMPUTING↗

Potential impacts of Fukushima nuclear wastewater discharge on nutrient supply and greenhouse gas emissions of food systems

Seafood plays a critical role in promoting a nutritious and climate-friendly food system but faces challenges from marine contamination that pose food safety risks. Here, to address these challenges, we developed a Marine Pollution-induced Food System Risk Assessment and Response (MP-FSRAR) model to assess the impact of consumer perceptions of marine pollution risk events on nutrient supply and greenhouse gas (GHG) emissions. Applying this model to the proposed Fukushima Nuclear Wastewater Discharge (FNWD) into the Pacific Ocean, we identified the potential variation in nutrient supply and GHG emissions resulting from changes in Chinese consumers' willingness to consume seafood under 12 scenarios. Our analysis revealed nutrient supply gaps in daily protein, minerals, vitamins, and fatty acids, ranging from 1.5 to 2.7 g/person, 2.5–4.5 mg/person, 5.6–10.3 mcg/person, and 0.08–0.14 g/person, respectively. Closing the protein gap in China would require an additional 3.2–15.8 billion kg yr -1 protein-rich foods, including aquatic, livestock, dairy, and pulses. Additional food supply would increase extra GHG emissions by 1–79 billion kg CO 2 e yr -1 , resulting in potential GHG emissions being transmitted to other countries through the trade chain. Furthermore, we found that the livestock-based food substitution pathway had 40 times higher GHG emissions than the plant-based one. Our MP-FSRAR model provides global stakeholders with new perspectives on the potential consequences of consumer perceptions of marine pollution risks and offers valuable insights for developing countermeasures to build a more resilient and low-carbon food system.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Quantitative Risk Analysis of High Safety Significant Safety-related Digital Instrumentation and Control Systems in Nuclear Power Plants using IRADIC Technology

This report documents the activities performed by Idaho National Laboratory (INL) during fiscal year (FY) 2021 for the U.S. Department of Energy (DOE) Light Water Reactor Sustainability (LWRS) Program, Risk Informed Systems Analysis (RISA) Pathway, digital instrumentation and control (DI&C) Risk Assessment project. In FY-2019, the RISA Pathway initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades/designs. An integrated risk assessment technology for the DI&C systems (IRADIC technology) was proposed for this strategy, which aims to (1) provide a best-estimate risk-informed capability to quantitatively and accurately estimate the safety margin obtained from plant modernization, especially for the High Safety Significant Safety-related (HSSSR) DI&C systems, (2) develop an advanced risk assessment technology to support transition from analog to DI&C technologies for nuclear industry, (3) assure the long-term safety and reliability of vital HSSSR DI&C systems, (4) reduce uncertainty in costs and support integration of DI&C systems in the plant. To achieve these technical goals and deal with the expensive licensing justifications from regulatory insights, the IRADIC technology is instructive for nuclear vendors and utilities to effectively lower the costs associated with digital compliance and speed industry advances by: (1) defining an integrated risk-informed analysis process for DI&C upgrade, including hazard analysis, reliability analysis, and consequence analysis, (2) applying systematic and risk-informed tools to address common cause failures (CCFs) and quantify responding failure probabilities for DI&C technologies, particularly software CCFs, (3) evaluating the impact of digital failures at the individual level, system level, and plant level, (4) providing insights and suggestions on designs to manage the risks; thus, to support the development, licensing, and deployment of advanced DI&C technologies on nuclear power plant (NPPs). In this report, an approach for performing software CCF analysis, given limited data, is developed and demonstrated using a case study of a highly redundant digital reactor trip system. Consequence analysis is also performed based on different accident scenarios. Results indicate that plant modernization including the improvement of HSSSR DI&C systems will make great benefits to plant safety by providing more safety margins to accident management. In addition, a novel approach is proposed in this report for the quantification of software hazards when sufficient operational and testing data available. The method incorporates software development quality as well as strong analysis techniques to identify and link software defects to potential failure modes. The approach includes both semantic and test-based analysis to detect failures that can exist in different stages of the software development life cycle. This method is applied to an advanced human system interface relevant to reactor trip safety developed from the APR 1400 design.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Enabling Model Organism and Commercial Astronaut Data Access Through the NASA Open Science Data Repository

NASA’s Open Science Data Repository (OSDR) brings together omics data from NASA’s GeneLab project and non-omics data, including physiological, phenotypic, imaging, and behavioral data from NASA’s Ames Life Sciences Data Archive (ALSDA) collected from decades of space biology research, providing open and FAIR (findable, accessible, interoperable, and reusable) access of these precious data to scientists world-wide. This rich source of meticulously curated metadata and data from spaceflight and analog studies has been mined by the scientific community resulting in dozens of high impact scientific publications that reveals a complex network of molecular and physiological effects of spaceflight across living systems, from microbes to plants, to mammals. Understanding how these effects translate to the human condition is critical as we move deeper into the era of commercial space travel. However, the integration of data, specifically omics data, from astronauts is particularly challenging due to their sensitive nature. OSDR has risen to this challenge by developing a mechanism to control access to identifiable levels of omics data, such as raw sequence data, while enabling public access to processed, unidentifiable, data and associated metadata that will allow the scientific community to interrogate human astronaut data alongside data from model organisms to begin answering these critical questions. The 2021 SpaceX Inspiration4 (I4) mission collected a comprehensive atlas of biological measurements from four civilian astronauts, providing a wealth of data to characterize the effects of spaceflight on the human body. These data include both non-omics and omics assays such as direct RNA sequencing (RNA-seq), single nuclei ATAC-seq and RNA-seq, metagenomics, proteomics, and comprehensive metabolic and cytokine panels, all of which have been integrated into the OSDR system across no less than 9 studies. Each study has been carefully curated using community-backed OSDR standards for sample and assay level metadata ensuring these data are findable and accessible. In addition to hosting both raw and processed data from the principal investigator team for each assay type, the GeneLab team plans to re-process the I4 omics data using GeneLab’s standard processing pipelines. The GeneLab processed data outputs will allow for comparisons across studies on OSDR and enable visualization of these data through the OSDR data visualization platform thereby enabling data reusability and interoperability. Here we describe the robust privacy and security protocols implemented by OSDR to safeguard sensitive health data from astronauts while facilitating metadata and processed data sharing for research purposes. We further provide a road map for navigating the vast amount of data provided for each I4 study on the OSDR, including experimental design, associated experiments, payloads, and missions, data generation and analysis protocols, and associated scientific articles. Additionally, we illustrate how to interrogate the standardized metadata provided in the sample and assay tables as well as various means to download and access the data including programmatically through the GeneLab Open API (GLOpenAPI). The open access of datasets in NASA’s OSDR provides a unique opportunity for the scientific community, as well as citizen scientists and students, to continue using OSDR resources to further unlock profound insights into the consequences of space travel on the human body. Through implementation of security measures to protect sensitive human data, the OSDR seeks to strengthen the science exchange between the Biological and Physical Sciences Program and the Human Research Program, per recommendation 4-1 of the 2023-2032 Decadal Survey, and encourage further sharing and dissemination of astronaut data to provide the scientific community with the resources needed to lay the groundwork for developing targeted mitigation strategies to help withstand the rigors of long-duration spaceflight.

Amanda Marie Saravia-butler↗

Markets and Economic Requirements for Fission Batteries and Other Nuclear Systems

Fission Batteries (FBs) are nuclear reactors defined by five characteristics which enable large-scale deployment: cost competitive, standardized sizes for economic mass production, easy installation and removal, secure and safe unattended operation with high reliability. FBs are not defined by technology or power level. Technical and market considerations suggest that most FBs will produce 20 to 30 MWt. This proceedings reports on the outcomes of two workshops that were held in January 2021 to better define markets and economic challenges for FBs. Three major markets were identified. The largest market is the industrial and commercial heat market. There are about 4000 industrial users (excluding utilities) that require more than one megawatt of heat. The number of customers versus size of heat demand was determined. In a low-carbon world there is the potential for many additional customers—including expanded biofuels production and district heat. The second market is for non-grid electricity. This includes co-generation plants that produce heat and electricity for a single customer. The third market is the maritime market with ~100,000 ships worldwide. In the United States, natural gas is the low-cost energy option today and will remain so unless constraints or taxes impact its use. If restrictions on greenhouse gas emissions, the FB competition includes natural gas with carbon capture, biofuels, hydrogen and grid electricity. Natural gas with carbon capture is not economically viable on a small scale. Biofuels may be expensive but may be the economically preferred option for locations with small energy demands of a few megawatts. Hydrogen is a potential competitor with many of the characteristics of natural gas. Grid electricity is not a competitive source of heat. For FBs to be economically competitive, the price of delivered heat must be $20-50/MWh ($6-15/million BTU). The economically competitive range for non-grid electricity is estimated at $70-100/MWh. These electricity prices are competitive with the retail prices of electricity in many parts of the United States for the customer. FBs are not expected to be competitive selling wholesale electricity to the grid. To achieve the aforementioned cost targets for heat and electricity markets, FB designers must (1) maximize the power output within the constraints of a FB (e.g., truck transportability, passive decay heat removal), (2) drastically reduce the size of onsite staff, (3) adopt core designs with low fuel costs (enrichment and fabrication), and (4) develop a system design that is efficiently manufactured in factories. The business case depends upon more than being just a replacement for natural gas. The largest incentives for adoption of FBs is where they create new markets and new sources of revenue. An example is the paper and pulp industry that burns biomass wastes to provide heat and electricity to make paper. An external heat source could meet the demand for heat and electricity by the paper process and enable converting waste biomass into liquid biofuels rather than burning to provide heat. Other markets, such as data centers, are driven by special energy requirements such as extreme reliability. Most customers are not in the energy business but need heat and electricity to produce a product—a manufactured good, education, retail sales (shopping malls), marine transport or some other product. As a consequence, there will be large incentives to lease rather than own FBs. Leasing avoids the regulatory challenges that remain with the owner of the FB. Leasing creates large incentives for FP standardization of sizes and transportability to maintain the value of the FB at the end of the lease—similar to the leasing of jet engines and aircraft. The economic constraints combined with technical constraints suggest competitive FBs will likely have outputs exceeding 10 MWt. There appear to be little incentives for very long-lived reactor cores because such machines require much larger inventories of fuel. Maintenance requirements and the options to provide technology updates may favor shorter lifetimes (~5 years). The assessment is that there is the potential for FBs to be economically viable and play a major role in global decarbonization in three markets: heat, non-grid electricity and maritime applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗