The anelastic approximation for thermal convection.
Subsonic thermal convection or internal gravity waves from formal scale analysis of equations of motion in plane parallel atmosphere
Gough, D. O.↗
SEARCH · Search NASA
Results for “Formal analysis”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Tracking and Data Relay Satellite System (TDRSS) navigation with DSN radio metric data
The use of DSN radiometric data for enhancing the orbit determination capability for TDRS is examined. Results of a formal covariance analysis are presented which establish the nominal TDRS navigation performance and assess the performance improvement based on augmenting the nominal TDRS data strategy with radiometric data from DSN sites.
Ellis, J.↗
Deep Space Navigation with Noncoherent Tracking Data
Navigation capabilities of noncoherent tracking data are evaluated for interplanetary cruise phase and planetary (Venus) flyby orbit determination. Results of a formal covariance analysis are presented which show that a combination of one-way Doppler and delta DOR yields orbit accuracies comparable to conventional two-way Doppler tracking. For the interplanetary cruise phase, a tracking cycle consisting of a 3-hour Doppler pass and delta DOR (differential one-way range) from two baselines (one observation per overlap) acquired 3 times a month results in 100-km orbit determination accuracy. For reconstruction of a Venus flyby orbit, 10 days tracking at encounter consisting of continuous one-way Doppler and delta DOR sampled at one observation per overlap is sufficient to satisfy the accuracy requirements.
Ellis, J.↗
Software safety - A user's practical perspective
Software safety assurance philosophy and practices at the NASA Ames are discussed. It is shown that, to be safe, software must be error-free. Software developments on two digital flight control systems and two ground facility systems are examined, including the overall system and software organization and function, the software-safety issues, and their resolution. The effectiveness of safety assurance methods is discussed, including conventional life-cycle practices, verification and validation testing, software safety analysis, and formal design methods. It is concluded (1) that a practical software safety technology does not yet exist, (2) that it is unlikely that a set of general-purpose analytical techniques can be developed for proving that software is safe, and (3) that successful software safety-assurance practices will have to take into account the detailed design processes employed and show that the software will execute correctly under all possible conditions.
Dunn, William R.↗
Applications of Formal Methods to Specification and Safety of Avionics Software
This report treats several topics in applications of formal methods to avionics software development. Most of these topics concern decision tables, an orderly, easy-to-understand format for formally specifying complex choices among alternative courses of action. The topics relating to decision tables include: generalizations fo decision tables that are more concise and support the use of decision tables in a refinement-based formal software development process; a formalism for systems of decision tables with behaviors; an exposition of Parnas tables for users of decision tables; and test coverage criteria and decision tables. We outline features of a revised version of ORA's decision table tool, Tablewise, which will support many of the new ideas described in this report. We also survey formal safety analysis of specifications and software.
Hoover, D. N.↗
Hydrodynamic Instability in an Extended Landau/Levich Model of Liquid-Propellant Combustion at Normal and Reduced Gravity
The classical Landau/Levich models of liquid-propellant combustion, despite their relative simplicity, serve as seminal examples that correctly describe the onset of hydrodynamic instability in reactive systems. Recently, these two separate models have been combined and extended to account for a dynamic dependence, absent in the original formulations, of the local burning rate on the local pressure and temperature fields. The resulting model admits an extremely rich variety of both hydrodynamic and reactive/diffusive instabilities that can be analyzed either numerically or analytically in various limiting parameter regimes. In the present work, a formal asymptotic analysis, based on the realistic smallness of the gas-to-liquid density ratio, is developed to investigate the combined effects of gravity and other parameters on the hydrodynamic instability of the propagating liquid/gas interface. In particular, an analytical expression is derived for the neutral stability boundary A(p)(k), where A(p) is the pressure sensitivity of the burning rate and k is the wavenumber of the disturbance. The results demonstrate explicitly the stabilizing effect of gravity on long-wave disturbances, the stabilizing effect of viscosity (both liquid and gas) and surface tension on short-wave perturbations, and the instability associated with intermediate wavenumbers for negative values of A(p). In the limiting case of weak gravity, it is shown that hydrodynamic instability in liquid-propellant combustion is a long-wave instability phenomenon, whereas at normal gravity, this instability is first manifested through O(1) wavenumber disturbances. it is also demonstrated that, in general, surface tension and the viscosity of both the liquid and gas phases each produce comparable stabilizing effects in the long-wavenumber regime, thereby providing important modifications to previous analyses in which one or more of these effects were neglected.
Margolis, S. B.↗
Structural Embeddings: Mechanization with Method
The most powerful tools for analysis of formal specifications are general-purpose theorem provers and model checkers, but these tools provide scant methodological support. Conversely, those approaches that do provide a well-developed method generally have less powerful automation. It is natural, therefore, to try to combine the better-developed methods with the more powerful general-purpose tools. An obstacle is that the methods and the tools often employ very different logics. We argue that methods are separable from their logics and are largely concerned with the structure and organization of specifications. We, propose a technique called structural embedding that allows the structural elements of a method to be supported by a general-purpose tool, while substituting the logic of the tool for that of the method. We have found this technique quite effective and we provide some examples of its application. We also suggest how general-purpose systems could be restructured to support this activity better.
Munoz, Cesar↗
Hydrodynamic Instability in an Extended Landau/Levich Model of Liquid-Propellant Combustion
The classical Landau/Levich models of liquid propellant combustion, which serve as seminal examples of hydrodynamic instability in reactive systems, have been combined and extended to account for a dynamic dependence, absent in the original formulations, of the local burning rate on the local pressure and/or temperature fields. The resulting model admits an extremely rich variety of both hydrodynamic and reactive/diffusive instabilities that can be analyzed in various limiting parameter regimes. In the present work, a formal asymptotic analysis, based on the realistic smallness of the gas-to-liquid density ratio, is developed to investigate the combined effects of gravity, surface tension and viscosity on the hydrodynamic instability of the propagating liquid/gas interface. In particular, a composite asymptotic expression, spanning three distinguished wavenumber regimes, is derived for both cellular and pulsating hydrodynamic neutral stability boundaries A(sub p)(k), where A(sub p) is the pressure sensitivity of the burning rate and k is the disturbance wavenumber. For the case of cellular (Landau) instability, the results demonstrate explicitly the stabilizing effect of gravity on long-wave disturbances, the stabilizing effect of viscosity and surface tension on short-wave perturbations, and the instability associated with intermediate wavenumbers for critical negative values of A(sub p). In the limiting case of weak gravity, it is shown that cellular hydrodynamic instability in this context is a long-wave instability phenomenon, whereas at normal gravity, this instability is first manifested through O(l) wavenumber disturbances. It is also demonstrated that, in the large wavenumber regime, surface tension and both liquid and gas viscosity all produce comparable stabilizing effects in the large-wavenumber regime, thereby providing significant modifications to previous analyses of Landau instability in which one or more of these effects were neglected. In contrast, the pulsating hydrodynamic stability boundary is found to be insensitive to gravitational and surface-tension effects, but is more sensitive to the effects of liquid viscosity, which is a significant stabilizing effect for O(l) and higher wavenumbers. Liquid-propellant combustion is predicted to be stable (i.e., steady and planar) only for a range of negative pressure sensitivities that lie between the two types of hydrodynamic stability boundaries.
Margolis, Stephen B.↗
Hydrodynamic Instability in an Extended Landau/Levich Model of Liquid-Propellant Combustion at Normal and Reduced Gravity
The classical Landau/Levich models of liquid-propellant combustion, despite their relative simplicity, serve as seminal examples that correctly describe the onset of hydrodynamic instability in reactive systems. Recently, these two separate models have been combined and extended to account for a dynamic dependence, absent in the original formulations, of the local burning rate on the local pressure and temperature fields. The resulting model admits an extremely rich variety of both hydrodynamic and reactive/diffusive instabilities that can be analyzed either numerically or analytically in various limiting parameter regimes. In the present work, a formal asymptotic analysis, based on the realistic smallness of the gas-to-liquid density ratio, is developed to investigate the combined effects of gravity and other parameters on the hydrodynamic instability of the propagating liquid/gas interface. In particular, an analytical expression is derived for the neutral stability boundary A(sub p)(k), where A(sub p) is the pressure sensitivity of the burning rate and k is the wavenumber of the disturbance. The results demonstrate explicitly the stabilizing effect of gravity on long-wave disturbances, the stabilizing effect of viscosity (both liquid and gas) and surface tension on short-wave perturbations, and the instability associated with intermediate wavenumbers for critical negative values of A(sub p). In the limiting case of weak gravity, it is shown that hydrodynamic instability in liquid-propellant combustion is a long-wave instability phenomenon, whereas at normal gravity, this instability is first manifested through O(1) wavenumber disturbances. It is also demonstrated that, in general, surface tension and the viscosity of both the liquid and gas phases each produce comparable stabilizing effects in the large-wavenumber regime, thereby providing important modifications to previous analyses in which one or more of these effects were neglected.
Margolis, Stephen B.↗
A microstructural approach to cytoskeletal mechanics based on tensegrity
Mechanical properties of living cells are commonly described in terms of the laws of continuum mechanics. The purpose of this report is to consider the implications of an alternative approach that emphasizes the discrete nature of stress bearing elements in the cell and is based on the known structural properties of the cytoskeleton. We have noted previously that tensegrity architecture seems to capture essential qualitative features of cytoskeletal shape distortion in adherent cells (Ingber, 1993a; Wang et al., 1993). Here we extend those qualitative notions into a formal microstructural analysis. On the basis of that analysis we attempt to identify unifying principles that might underlie the shape stability of the cytoskeleton. For simplicity, we focus on a tensegrity structure containing six rigid struts interconnected by 24 linearly elastic cables. Cables carry initial tension ("prestress") counterbalanced by compression of struts. Two cases of interconnectedness between cables and struts are considered: one where they are connected by pin-joints, and the other where the cables run through frictionless loops at the junctions. At the molecular level, the pinned structure may represent the case in which different cytoskeletal filaments are cross-linked whereas the looped structure represents the case where they are free to slip past one another. The system is then subjected to uniaxial stretching. Using the principal of virtual work, stretching force vs. extension and structural stiffness vs. stretching force relationships are calculated for different prestresses. The stiffness is found to increase with increasing prestress and, at a given prestress, to increase approximately linearly with increasing stretching force. This behavior is consistent with observations in living endothelial cells exposed to shear stresses (Wang & Ingber, 1994). At a given prestress, the pinned structure is found to be stiffer than the looped one, a result consistent with data on mechanical behavior of isolated, cross-linked and uncross-linked actin networks (Wachsstock et al., 1993). On the basis of our analysis we concluded that architecture and the prestress of the cytoskeleton might be key features that underlie a cell's ability to regulate its shape.
NASA Discipline Cell Biology↗
Towards Principled Experimental Study of Autonomous Mobile Robots
We review the current state of research in autonomous mobile robots and conclude that there is an inadequate basis for predicting the reliability and behavior of robots operating in unengineered environments. We present a new approach to the study of autonomous mobile robot performance based on formal statistical analysis of independently reproducible experiments conducted on real robots. Simulators serve as models rather than experimental surrogates. We demonstrate three new results: 1) Two commonly used performance metrics (time and distance) are not as well correlated as is often tacitly assumed. 2) The probability distributions of these performance metrics are exponential rather than normal, and 3) a modular, object-oriented simulation accurately predicts the behavior of the real robot in a statistically significant manner.
Object-Oriented Simulation↗
Formal methods for modeling and analysis of hybrid systems
A technique based on the use of a quantifier elimination decision procedure for real closed fields and simple theorem proving to construct a series of successively finer qualitative abstractions of hybrid automata is taught. The resulting abstractions are always discrete transition systems which can then be used by any traditional analysis tool. The constructed abstractions are conservative and can be used to establish safety properties of the original system. The technique works on linear and non-linear polynomial hybrid systems: the guards on discrete transitions and the continuous flows in all modes can be specified using arbitrary polynomial expressions over the continuous variables. An exemplar tool in the SAL environment built over the theorem prover PVS is detailed. The technique scales well to large and complex hybrid systems.
Tiwari, Ashish↗
Metallurgical Design and Development of NASA Crawler/Transporter Tread Belt Shoe Castings
The NASA Crawler/Transporters (CT-1 and CT-2) used to transport the Space Shuffles are one of the largest tracked vehicles in existence today. Two of these machines have been used to move space flight vehicles at Kennedy Space Center since the Apollo missions of the 1960's and relatively few modifications have been made to keep them operational. In September of 2003 during normal Crawler/Transporter operations cracks were observed along the roller pad surfaces of several tread belt shoes. Further examination showed 20 cracked shoes on CT-1 and 40 cracked shoes on CT-2 and a formal failure analysis investigation was undertaken while the cracked shoes were replaced. Six shoes were cross-sectioned with the fracture surfaces exposed and it was determined that the cracks were due to fatigue that initiated on the internal casting web channels at pre-existing casting defects and propagated through thickness both transgranularly and intergranularly between internal shrinkage cavities, porosity, and along austenitic and ferritic grain boundaries. The original shoes were cast during the 1960's using a modified 861330 steel with slightly higher levels of chromium, nickel and molybdenum followed by heat treatment to achieve a minimum tensile strength of 11 Oksi. Subsequent metallurgical analysis of the tread belt shoes after multiple failures showed excessive internal defects, alloy segregation, a nonuniform ferritic/ bainitic/martensitic microstructure, and low average tensile properties indicative of poor casting and poor heat-treatment. As a result, NASA funded an initiative to replace all of the tread belt shoes on both crawler/transporters along with a redesign of the alloy, manufacturing, and heat-treatment to create a homogeneous cast structure with uniform mechanical and metallurgical properties. ME Global, a wholly owned subsidiary of ME Elecmetal based in Minneapolis, MN was selected as manufacturing and design partner to develop the new shoes and this paper describes the research, development, and manufacturing that resulted in the successful delivery of 1044 new Crawler/Transporter tread belt shoes all meeting rigid metallurgical and mechanical design criteria derived from finite element modeling of the stress loads required for safe space shuttle transport.
Parker, Donald S.↗
V and V of Lexical, Syntactic and Semantic Properties for Interactive Systems Through Model Checking of Formal Description of Dialog
During early phases of the development of an interactive system, future system properties are identified (through interaction with end users in the brainstorming and prototyping phase of the application, or by other stakehold-ers) imposing requirements on the final system. They can be specific to the application under development or generic to all applications such as usability principles. Instances of specific properties include visibility of the aircraft altitude, speed… in the cockpit and the continuous possibility of disengaging the autopilot in whatever state the aircraft is. Instances of generic properties include availability of undo (for undoable functions) and availability of a progression bar for functions lasting more than four seconds. While behavioral models of interactive systems using formal description techniques provide complete and unambiguous descriptions of states and state changes, it does not provide explicit representation of the absence or presence of properties. Assessing that the system that has been built is the right system remains a challenge usually met through extensive use and acceptance tests. By the explicit representation of properties and the availability of tools to support checking these properties, it becomes possible to provide developers with means for systematic exploration of the behavioral models and assessment of the presence or absence of these properties. This paper proposes the synergistic use two tools for checking both generic and specific properties of interactive applications: Petshop and Java PathFinder. Petshop is dedicated to the description of interactive system behavior. Java PathFinder is dedicated to the runtime verification of Java applications and as an extension dedicated to User Interfaces. This approach is exemplified on a safety critical application in the area of interactive cockpits for large civil aircrafts.
human-computer interface↗
Static Analysis Using Abstract Interpretation
Short presentation about static analysis and most particularly abstract interpretation. It starts with a brief explanation on why static analysis is used at NASA. Then, it describes the IKOS (Inference Kernel for Open Static Analyzers) tool chain. Results on NASA projects are shown. Several well known algorithms from the static analysis literature are then explained (such as pointer analyses, memory analyses, weak relational abstract domains, function summarization, etc.). It ends with interesting problems we encountered (such as C++ analysis with exception handling, or the detection of integer overflow).
Static Analysis↗
Understanding and Verifying Deep Neural Networks
Explore the source record for details and available documents.
Prophecy↗
Feature-Guided Analysis of Neural Networks
Applying standard software engineering practices to neural networks is challenging due to the lack of high-level abstractions describing a neural network’s behavior. To address this challenge, we propose to extract high-level task-specific features from the neural network internal representation, based on monitoring the neural network activations.The extracted feature representations can serve as a link to high-level requirements and can be leveraged to enable fundamental software engineering activities, such as automated testing, debugging, requirements analysis, and formal verification, leading to better engineering of neural networks. Using two case studies, we present initial empirical evidence demonstrating the feasibility of our ideas.
Features↗
Statistical foundation of the fluid analogue of the soliton formalism
A fully nonlinear analysis is used to develop a general soliton formalism for the description of the nonlinear evolution of soliton fluctuations in both plasmas and classical fluids. From the Navier-Stokes equations for plasmas and compressible fluids of two scales, two equations for the propagation of density waves are derived. A fast soliton field is spontaneously created by rarefaction, and a slow density wave modulates the field intensity as a ponderomotive force. Constitutive properties are demonstrated using a Lagrangian-kinetic formalism of the fluctuation-dissipation theory.
Tchen, C. M.↗