SEARCH · Search NASA

Results for “hardware reliability”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,387 records · Page 77

All sources NASA NTRS DOE OSTI

NASA NTRS1993

Status of the Fiber Optic Control System Integration (FOCSI) program

This report presents a discussion of the progress made in the NASA/NAVY Fiber Optic Control System Integration (FOCSI) program. This program will culminate in open-loop flight tests of passive optical sensors and associated electro-optics on an F-18 aircraft. Currently, the program is in the final stages of hardware fabrication and environmental testing of the passive optical sensors and electro-optics. This program is a foundation for future Fly-by-Light (FBL) programs. The term Fly-by-Light is used to describe the utilization of passive optical sensors and fiber optic data links for monitoring and control of aircraft in which sensor and actuation signals are transmitted optically. The benefits of this technology for advanced aircraft include the following: improved reliability and reduced certification cost due to greater immunity to EME (electromagnetic effects); reduced harness volume and weight; elimination of short circuits and sparking in wiring due to insulation deterioration; lower maintenance costs (fewer components); greater flexibility in data bus protocol and architecture; absence of ground loops; and higher operating temperatures for electrically passive optical sensors.

Baumbick, Robert J.↗

NASA NTRS2014

Control and Non-Payload Communications Generation 1 Prototype Radio Flight Test Report

Unmanned aircraft (UA) represent a new capability that will provide a variety of services in the Government (public) and commercial (civil) aviation sectors. The growth of this potential industry has not yet been realized because of the lack of a common understanding of what is required to safely operate Unmanned Aircraft Systems in the National Airspace System (UAS in the NAS). The desire and ability to fly UA is of increasing urgency. The application of UA to perform national security, defense, scientific, and emergency management are driving the critical need for less restrictive access by UA to the NAS. Existing Federal Aviation Regulations, procedures, and technologies do not allow routine UA access to the NAS. Access to the NAS is hampered by challenges such as the lack of an onboard pilot to see and avoid other aircraft; the ability of a single pilot or operator to control multiple UA; the reliance on command and control (C2) links; the altitudes, speeds, and duration at which the aircraft fly; and the wide variation in UA size and performance. NASA is working with other Government agencies to provide solutions that reduce technical barriers and make access to the NAS routine. This goal will be accomplished through system-level integration of key concepts, technologies, or procedures and through demonstrations of these integrated capabilities in an operationally relevant environment. This project provides an opportunity to transition the acquired empirical data and knowledge to the Federal Aviation Administration and other stakeholders to help them define the requirements for routine UA access to the NAS.Radio communications channels for UA are currently managed through exceptions and use either Department of Defense frequencies for line-of-sight (LOS) and satellite-based communications links, low-power LOS links in amateur bands, or unlicensed Industrial/Scientific/Medical (ISM) frequencies. None of these frequency bands are designated for safety and regularity of flight. Only recently has radiofrequency (RF) spectrum been allocated by the International Telecommunications Union specifically for commercial UA C2, LOS communication (L-Band: 960 to 1164 MHz, and C-Band: 5030 to 5091 MHz). The safe and efficient integration of UA into the NAS requires the use of protected RF spectrum allocations and a new data communications system that is both secure and scalable to accommodate the potential growth of these new aircraft. Data communications for UA-referred to as control and non-payload communications (CNPC)-will be used to exchange information between a UA and a ground station (GS) to ensure safe, reliable, and effective UA flight operation. The focus of this effort is on validating and allocating new RF spectrum and data link communications to enable civil UA integration into the NAS. Through a cost-sharing cooperative agreement with Rockwell Collins, Inc., the NASA Glenn Research Center is exploring and performing the necessary development steps to realize a prototype UA CNPC system. These activities include investigating signal waveforms and access techniques, developing representative CNPC radio hardware, and executing relevant testing and validation activities. There is no intent to manufacture the CNPC end product, rather the goals are to study, demonstrate, and validate a typical CNPC system that will allow safe and efficient communications within the L-Band and C-Band spectrum allocations. The system is addressing initial "seed" requirements from RTCA, Inc., Special Committee 203 (SC-203) and is on a path to Federal Aviation Administration certification. This report provides results from the flight testing campaign of the Rockwell Collins Generation 1 prototype radio, referred hereafter as the "radio." The radio sets operate within the 960- to 977-MHz frequency band with both air and ground radios using identical hardware. Flight tests involved one aircraft and one GS. Results include discussion of aircraft flight paths and associated radio performance.

Shalkhauser, Kurt A.↗

DOE OSTI2023

Compute-Efficient Deep Learning: Algorithmic Trends and Opportunities

Although deep learning has made great progress in recent years, the exploding economic and environmental costs of training neural networks are becoming unsustainable. To address this problem, there has been a great deal of research on algorithmically-efficient deep learning, which seeks to reduce training costs not at the hardware or implementation level, but through changes in the semantics of the training program. In this paper, we present a structured and comprehensive overview of the research in this field. First, we formalize the algorithmic speedup problem, then we use fundamental building blocks of algorithmically efficient training to develop a taxonomy. Our taxonomy highlights commonalities of seemingly disparate methods and reveals current research gaps. Next, we present evaluation best practices to enable comprehensive, fair, and reliable comparisons of speedup techniques. To further aid research and applications, we discuss common bottlenecks in the training pipeline (illustrated via experiments) and offer taxonomic mitigation strategies for them. Finally, we highlight some unsolved research challenges and present promising future directions.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS1979

Safety considerations in the design and operation of large wind turbines

The engineering and safety techniques used to assure the reliable and safe operation of large wind turbine generators utilizing the Mod 2 Wind Turbine System Program as an example is described. The techniques involve a careful definition of the wind turbine's natural and operating environments, use of proven structural design criteria and analysis techniques, an evaluation of potential failure modes and hazards, and use of a fail safe and redundant component engineering philosophy. The role of an effective quality assurance program, tailored to specific hardware criticality, and the checkout and validation program developed to assure system integrity are described.

Reilly, D. H.↗

DOE OSTI2014

One Size Does Not Fit All: Human Failure Event Decomposition and Task Analysis

In the probabilistic safety assessments (PSAs) used in the nuclear industry, human failure events (HFEs) are determined as a subset of hardware failures, namely those hardware failures that could be triggered or exacerbated by human action or inaction. This approach is top-down, starting with hardware faults and deducing human contributions to those faults. Elsewhere, more traditionally human factors driven approaches would tend to look at opportunities for human errors first in a task analysis and then identify which of those errors is risk significant. The intersection of top-down and bottom-up approaches to defining HFEs has not been carefully studied. Ideally, both approaches should arrive at the same set of HFEs. This question remains central as human reliability analysis (HRA) methods are generalized to new domains like oil and gas. The HFEs used in nuclear PSAs tend to be top-down—defined as a subset of the PSA—whereas the HFEs used in petroleum quantitative risk assessments (QRAs) are more likely to be bottom-up—derived from a task analysis conducted by human factors experts. The marriage of these approaches is necessary in order to ensure that HRA methods developed for top-down HFEs are also sufficient for bottom-up applications. In this paper, I first review top-down and bottom-up approaches for defining HFEs and then present a seven-step guideline to ensure a task analysis completed as part of human error identification decomposes to a level suitable for use as HFEs. This guideline illustrates an effective way to bridge the bottom-up approach with top-down requirements.

99 GENERAL AND MISCELLANEOUS↗

DOE OSTI2021

Feasibility and Prospects of the High Resolution Rapid Refresh Model For Dynamic Line Rating

The ampacity of transmission lines is defined as the maximum amount of current the conductor can safely carry. It is necessary for transmission line operators to apply ampacity limits due to the thermal properties of the conductor. Dynamic Line Rating (DLR) is a technology and technique that uses the environmental conditions or a set of the conditions to calculate the ampacity of the conductor. The way the DLR is calculated has depended upon some amount of physical technology to implement the solution. The High Resolution Rapid Refresh (HRRR) Model is an atmospheric model that may provide enough resolution to perform dynamic line rating without any hardware at all. The objective is to use this model to perform Dynamic Line Rating. This will solve two of the most pervasive problems in Dynamic Line Rating, how to instrument a transmission line hundreds of miles long and then how to predict near future ampacity sufficient for transmission operators to effectively use, This technique will use the Idaho National Laboratory site as the test location for analysis. The High Resolution Rapid Refresh model is a reliable, freely available, and well-maintained weather forecasting model for the entire United States of America. The model provides enough special resolution that additional local weather monitoring devices at location are not necessary to conduct dynamic line rating. The HRRR ratings are lower on average than the locally measured ratings which allows for an additional margin of safety. The adoption of using purely digital methods for dynamic line rating could allow for wide scale adoption of the technology with very little overhead expenditure of implementation.

17 WIND ENERGY↗

DOE OSTI2022

National Ignition Facility. Facility and Infrastructure Systems Maintenance Plan

Ensuring the reliability of the NIF, including its support systems, laser systems, target diagnostic systems, and utilities, is essential to the availability of the NIF in its support of NNSA missions. NIF is a key capability in the DOE Stockpile Stewardship Program and supports high energy physics experiments for nuclear weapons, energy, and astrophysics applications. High system reliability provides opportunities for shots and scientific discoveries with opportunities to enhance and upgrade capabilities. This Maintenance Plan (MP) identifies the policies and procedures used to perform and support asset management of the NIF Facility and Infrastructure Systems (FInS), NIF Lasers & Alignment (LASE), NIF Target Experimental Operations (TOPS), NIF Target Area Science and Engineering (TASE), and NIF&PS Control Systems (NCS). The FInS systems include the facility, HVAC, contamination control, beampath, and Line Replaceable Units (LRUs) as well as utilities which create the beampath environments, such as vacuum, argon, or clean dry air. The LASE systems are Programmatic systems which include laser diagnostics, alignment, power conditioning, pulsed power, and input laser systems. The TOPS and TASE systems are also Programmatic systems which include target and diagnostic delivery systems and positioners, many different insertable and fixed target diagnostics, and cryogenic and target gas fill systems. Finally, the NCS systems include both software and hardware for industrial and shot operation control systems. Policies governing administrative and operational practices related to maintenance of FInS, LASE, TOPS, TASE, and NCS systems are described in this plan. In addition, the plan provides processes and procedures for managing, tracking, and documenting the work. This document, the NIF Operations Management Plan, NIF-5020544 (Ref. 1), and NIF Shot Operations Plan, NIF-5018506 (Ref. 2), together satisfy the requirements of the Conduct of Operations. Duties, responsibilities, and reporting requirements of the various positions associated with FInS, LASE, and TOPS maintenance are detailed in this plan. The FInS systems include both Real Property systems with asset management requirements specified in DOE Order 430.1C (Ref. 3) and Programmatic systems. In addition, for FInS, there is a list of the System Level Maintenance Plans (SLMPs) in NIF-1007419198 (Ref. 4) which provide the system descriptions and maintenance plan and schedule. In addition, the list includes the Reliability Centered Maintenance (RCM) and Experience Centered Maintenance (ECM) evaluations that have been performed for applicable FInS systems as well as reliability criticality per Section 3.5. The -AM version of the NIF Maintenance Plan focuses on the reliability program for FInS, LASE, TOPS, TASE, and NCS within the context of the overall NIF Reliability, Availability, and Maintainability (RAM) program and incorporates changes since the -AL version from August 2011 and has been updated to be fully consistent with the updates to Ref. 1. It also includes asset management considerations, updates to the Work Order (WO) process within the NIF Computerized Maintenance Management System (CMMS) which is EAM infor® System Maintenance and Reliability Tracking (SMaRT) (Ref. 5), and updates to metrics and key performance indicators (KPIs).

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2024

Enhancing scalability and accuracy of quantum poisson solver

The Poisson equation has many applications across the broad areas of science and engineering. Most quantum algorithms for the Poisson solver presented so far either suffer from lack of accuracy and/or are limited to very small sizes of the problem and thus have no practical usage. In this regard, our previous work showed a proof-of-concept demonstration in advancing quantum Poisson solver algorithm and validated preliminary results for a simple case of 3 x 3 problem. In this work, we delve into comprehensive research details, presenting the results on up to 15 x 15 problems that include step-by-step improvements in Poisson equation solutions, scaling performance, and experimental exploration. In particular, we demonstrate the implementation of eigenvalue amplification by a factor of up to 2 8 , achieving a significant improvement in the accuracy of our quantum Poisson solver and comparing that to the exact solution. Additionally, we present success probability results, highlighting the reliability of our quantum Poisson solver. Moreover, we explore the scaling performance of our algorithm against the circuit depth and width, demonstrating how our approach scales with larger problem sizes and thus further solidifies the practicality of easy adaptation of this algorithm in real-world applications. We also discuss a multilevel strategy for how this algorithm might be further improved to explore much larger problems with greater performance. Finally, through our experiments on the IBM quantum hardware, we conclude that though overall results on the existing NISQ hardware are dominated by the error in the CNOT gates, this work opens a path to realizing a multidimensional Poisson solver on near-term quantum hardware.

97 MATHEMATICS AND COMPUTING↗

DOE OSTI2018

Relaxations of AC Maximal Load Delivery for Severe Contingency Analysis

This work considers the task of finding an AC-feasible operating point of a severely damaged transmission network while ensuring that a maximal amount of active power loads can be delivered. This AC Maximal Load Delivery (AC-MLD) task is a nonlinear, non-convex optimization problem, and is incredibly challenging to solve on large-scale transmission system datasets. This work demonstrates that convex relaxations of the AC-MLD problem provide a reliable and scalable method for finding high-quality bounds on the amount of active power that can be delivered in the AC-MLD problem. To demonstrate their effectiveness, the solution methods proposed in this work are rigorously evaluated on 1000 N – k scenarios on seven power networks ranging in size from 70 to 6000 buses. Furthermore, the most effective relaxation of the AC-MLD problem converges in less than 20 seconds on commodity computing hardware for all 7000 of the scenarios considered.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS1976

The preliminary design of an orbiting observatory - The Space Telescope

The systems and subsystems of the Space Telescope proposed for an orbiting observatory to be launched by the Space Shuttle in the 1980s are described. The structural design is simple and based on existing technologies for high reliability. Provisions are made for on-orbit servicing and maintenance. All deployable appendages are designed for manual override to insure retrieval and return of the Space Telescope to earth for major refurbishing, which should occur at intervals of not less than six years. Low performance risk, passive techniques are used in the thermal control subsystem to provide a cold-biased design with thermostatically controlled heaters to adjust temperature. The electrical power system utilizes NASA Standard Hardware - 50 ampere hour nickel-cadmium battery cells, a standard power regulator unit, and a flight-proven flexible rollup solar array with high-efficiency (12.5 per cent) silicon solar cells. The communication subsystem is designed for compatibility with the Tracking and Data Relay Satellite System. The pointing control system will have a maximum line of sight variation of 0.007 arc seconds. The telescope optics are a Ritchey-Chretien version of the Cassegrain configuration.

Timmons, K. P.↗

NASA NTRS1992

A low-cost, CCD solid state star tracker

Applied Research Corporation (ARC) has developed an engineering model of a multi-star CCD-based tracker for space applications requiring radiation hardness, high reliability and low power consumption. The engineering unit compared favorably in functional performance tests to the standard NASA single-star tracker. Characteristics of the ARC star tracker are: field of view = 10 deg x 7.5 deg, sensitivity range of -1 to +5 star magnitude, NEA = 3 in x 3 in, linearity = 5 in x 5 in, and power consumption of 1-3 W (operating mode dependent). The software is upgradable through a remote link. The hardware-limited acquisition rate is 1-5 Hz for stars of +2 to +5 magnitude and 10-30 Hz for -1 to +2 magnitude stars. Mechanical and electrical interfaces are identical to the standard NASA star tracker.

Chmielowski, M.↗

NASA NTRS2008

A Freezable Heat Exchanger for Space Suit Radiator Systems

During an ExtraVehicular Activity (EVA), both the heat generated by the astronaut s metabolism and that produced by the Portable Life Support System (PLSS) must be rejected to space. The heat sources include the heat of adsorption of metabolic CO2, the heat of condensation of water, the heat removed from the body by the liquid cooling garment and the load from the electrical components. Although the sublimator hardware to reject this load weighs only 1.58 kg (3.48 lbm), an additional 3.6 kg (8 lbm) of water are loaded into the unit, most of which is sublimated and lost to space, thus becoming the single largest expendable during an eight-hour EVA. Using a radiator to reject heat from the astronaut during an EVA can reduce the amount of expendable water consumed in the sublimator. Radiators have no moving parts and are thus highly reliable. Past freezable radiators have been too heavy, but the weight can be greatly reduced by placing a small and freeze tolerant heat exchanger between the astronaut and radiator, instead of making the very large radiator freeze tolerant. Therefore, the key technological innovation to improve space suit radiator performance was the development of a lightweight and freezable heat exchanger that accommodates the variable heat load generated by the astronaut. Herein, we present the heat transfer performance of a newly designed heat exchanger that endured several freeze / thaw cycles without any apparent damage. The heat exchanger was also able to continuously turn down or turn up the heat rejection to follow the variable load.

Nabity, James A.↗

NASA NTRS2011

Portable Multigas Monitors for International Space Station

The Environmental Health System (EHS) on International Space Station (ISS) includes portable instruments to measure various cabin gases that acutely impact crew health. These hand-held devices measure oxygen, carbon dioxide, carbon monoxide, hydrogen chloride and hydrogen cyanide. The oxygen and carbon dioxide units also serve to back up key functions of the Major Constituent Analyzers. Wherever possible, commercial off-the-shelf (COTS) devices are employed by EHS to save development and sustaining costs. COTS hardware designed for general terrestrial applications however has limitations such as no pressure compensation, limited life of the active sensor, calibration drift, battery issues, unpredictable vendor support and obsolescence. The EHS fleet (inflight and ground inventory) of instruments is both aging and dwindling in number. With the retirement of the US Space Shuttle, maintenance of on-orbit equipment becomes all the more difficult. A project is underway to search for gas monitoring technology that is highly reliable and stable for years. Tunable Diode Laser Spectroscopy (TDLS) seems to be the front-runner technology, but generally is not yet commercially available in portable form. NASA has fostered the development of TDLS through the Small Business Innovative Research (SBIR) program. A number of gases of interest to the aerospace and submarine communities can be addressed by TDLS including the list mentioned above plus hydrogen fluoride, ammonia and water (humidity). There are several different forms of TDLS including photoacoustic and direct absorption spectroscopy using various multipass cell geometries. This paper describes the history of portable gas monitoring on NASA spacecraft and provides a status of the development of TDLS based instruments. Planned TDLS flight experiments on ISS could lead both to operational use on ISS and important roles in future Exploration spacecraft and habitats.

Mudgett, Paul D.↗

NASA NTRS2012

Online Cable Tester and Rerouter

Hardware and algorithms have been developed to transfer electrical power and data connectivity safely, efficiently, and automatically from an identified damaged/defective wire in a cable to an alternate wire path. The combination of online cable testing capabilities, along with intelligent signal rerouting algorithms, allows the user to overcome the inherent difficulty of maintaining system integrity and configuration control, while autonomously rerouting signals and functions without introducing new failure modes. The incorporation of this capability will increase the reliability of systems by ensuring system availability during operations.

Lewis, Mark↗

NASA NTRS2014

Simulation and Control Lab Development for Power and Energy Management for NASA Manned Deep Space Missions

The development of distributed hierarchical and agent-based control systems will allow for reliable autonomous energy management and power distribution for on-orbit missions. Power is one of the most critical systems on board a space vehicle, requiring quick response time when a fault or emergency is identified. As NASAs missions with human presence extend beyond low earth orbit autonomous control of vehicle power systems will be necessary and will need to reliably function for long periods of time. In the design of autonomous electrical power control systems there is a need to dynamically simulate and verify the EPS controller functionality prior to use on-orbit. This paper presents the work at NASA Glenn Research Center in Cleveland, Ohio where the development of a controls laboratory is being completed that will be utilized to demonstrate advanced prototype EPS controllers for space, aeronautical and terrestrial applications. The control laboratory hardware, software and application of an autonomous controller for demonstration with the ISS electrical power system is the subject of this paper.

Space Flight↗

DOE OSTI2025

DS-TIDE: Harnessing Dynamical Systems for Efficient Time-Independent Differential Equation Solving

Time-Independent Differential Equations (TIDEs) are central to modeling equilibrium behavior across a wide range of scientific and engineering domains, from electrostatics to porous media flow. Conventional numerical solvers offer reliable solutions but incur significant computational costs due to fine-grained discretization and iterative procedures. Machine learning-based approaches address this by replacing iterative solving processes with one-time inference; however, their sophisticated models require extensive training resources that often exceed those of traditional solvers. Consequently, designing a TIDE solver that achieves high accuracy, broad applicability, and exceptional computational efficiency remains a fundamental challenge. In this paper, we propose DS-TIDE, a novel hardware solver that is inspired by, and subsequently leverages, the intrinsic connection between Dynamical Systems (DS) and Differential Equations (DEs) to efficiently and accurately solve TIDEs. DS-TIDE employs a CMOS-compatible DS-based processor, whose physical states evolve under carefully designed DE-driven dynamics and naturally converge to equilibrium -- the solution of the target TIDE -- within ~1µs on a ~1-watt DS-TIDE processor. To enhance expressivity, DS-TIDE incorporates Heterogeneous Dynamics with Temporal Layering (HDTL), which solves TIDEs through a three-stage DS evolution -- conditioning, solving, and decoding -- each governed by specialized dynamics. The entire evolution process is analogous to an infinitely deep neural network temporally unrolled, offering the system the capability of representing complex equations. Furthermore, DS-TIDE is equipped with an on-device DS-DE Auto-Alignment mechanism that dynamically adapts intrinsic hardware dynamics within milliseconds, effectively aligning the system’s dynamics to diverse target DEs. Experimental results across TIDEs from a wide range of scientific and engineering domains demonstrate that DS-TIDE achieves ~10^3× speedup, ~10^5× energy savings, and competitive or superior accuracy compared to state-of-the-art numerical and ML-based solvers.

Liu, Chuan↗

DOE OSTI2025

Edge AI-Enhanced Traffic Monitoring and Anomaly Detection Using Multimodal Large Language Models

This paper addresses the challenge of traffic monitoring and incident detection in remote areas, utilizing multimodal large language models (LLMs) deployed on edge AI devices. The key novelty of the LLM is to convert real-time video streams into descriptive texts, enabling low-bandwidth transmissions and reliable detection of anomalies and incidents in environments of intermittent connectivity. The model is developed based on fine-tuning open-source LLMs and extending it with multi-modal capabilities to analyze video frames. Our work also involves deploying this model on edge devices such as Nvidia IGX Orin and is planned to be tested in realistic environments in future work. The methodology includes data set curation, iterative model fine-tuning and compression, and hardware-based optimization. This approach aims to enhance traffic safety and response speed in remote areas, marking a significant advancement in the application of AI for traffic monitoring and safety management.

Peruski, Ryan [University of Tennessee, Knoxville ↗

DOE OSTI2016

Final Technical Report on Quantifying Dependability Attributes of Software Based Safety Critical Instrumentation and Control Systems in Nuclear Power Plants

With the current transition from analog to digital instrumentation and control systems in nuclear power plants, the number and variety of software-based systems have significantly increased. The sophisticated nature and increasing complexity of software raises trust in these systems as a significant challenge. The trust placed in a software system is typically termed software dependability. Software dependability analysis faces uncommon challenges since software systems’ characteristics differ from those of hardware systems. The lack of systematic science-based methods for quantifying the dependability attributes in software-based instrumentation as well as control systems in safety critical applications has proved itself to be a significant inhibitor to the expanded use of modern digital technology in the nuclear industry. Dependability refers to the ability of a system to deliver a service that can be trusted. Dependability is commonly considered as a general concept that encompasses different attributes, e.g., reliability, safety, security, availability and maintainability. Dependability research has progressed significantly over the last few decades. For example, various assessment models and/or design approaches have been proposed for software reliability, software availability and software maintainability. Advances have also been made to integrate multiple dependability attributes, e.g., integrating security with other dependability attributes, measuring availability and maintainability, modeling reliability and availability, quantifying reliability and security, exploring the dependencies between security and safety and developing integrated analysis models. However, there is still a lack of understanding of the dependencies between various dependability attributes as a whole and of how such dependencies are formed. To address the need for quantification and give a more objective basis to the review process -- therefore reducing regulatory uncertainty -- measures and methods are needed to assess dependability attributes early on, as well as throughout the life-cycle process of software development. In this research, extensive expert opinion elicitation is used to identify the measures and methods for assessing software dependability. Semi-structured questionnaires were designed to elicit expert knowledge. A new notation system, Causal Mechanism Graphing, was developed to extract and represent such knowledge. The Causal Mechanism Graphs were merged, thus, obtaining the consensus knowledge shared by the domain experts. In this report, we focus on how software contributes to dependability. However, software dependability is not discussed separately from the context of systems or socio-technical systems. Specifically, this report focuses on software dependability, reliability, safety, security, availability, and maintainability. Our research was conducted in the sequence of stages found below. Each stage is further examined in its corresponding chapter. Stage 1 (Chapter 2): Elicitation of causal maps describing the dependencies between dependability attributes. These causal maps were constructed using expert opinion elicitation. This chapter describes the expert opinion elicitation process, the questionnaire design, the causal map construction method and the causal maps obtained. Stage 2 (Chapter 3): Elicitation of the causal map describing the occurrence of the event of interest for each dependability attribute. The causal mechanisms for the “event of interest” were extracted for each of the software dependability attributes. The “event of interest” for a dependability attribute is generally considered to be the “attribute failure”, e.g. security failure. The extraction was based on the analysis of expert elicitation results obtained in Stage 1. Stage 3 (Chapter 4): Identification of relevant measurements. Measures for the “events of interest” and their causal mechanisms were obtained from expert opinion elicitation for each of the software dependability attributes. The measures extracted are presented in this chapter. Stage 4 (Chapter 5): Assessment of the coverage of the causal maps via measures. Coverage was assessed to determine whether the measures obtained were sufficient to quantify software dependability, and what measures are further required. Stage 5 (Chapter 6): Identification of “missing” measures and measurement approaches for concepts not covered. New measures, for concepts that had not been covered sufficiently as determined in Stage 4, were identified using supplementary expert opinion elicitation as well as literature reviews. Stage 6 (Chapter 7): Building of a detailed quantification model based on the causal maps and measurements obtained. Ability to derive such a quantification model shows that the causal models and measurements derived from the previous stages (Stage 1 to Stage 5) can form the technical basis for developing dependability quantification models. Scope restrictions have led us to prioritize this demonstration effort. The demonstration was focused on a critical system, i.e. the reactor protection system. For this system, a ranking of the software dependability attributes by nuclear stakeholders was developed. As expected for this application, the stakeholder ranking identified safety as the most critical attribute to be quantified. A safety quantification model limited to the requirements phase of development was built. Two case studies were conducted for verification. A preliminary control gate for software safety for the requirements stage was proposed and applied to the first case study. The control gate allows a cost effective selection of the duration of the requirements phase.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗