Search NASA⌕ Search

SEARCH · Search NASA

Results for “Risk consequence”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Evaluating cyber-risk in synchrophasor systems

Technology related to evaluating cyber-risk for synchrophasor systems is disclosed. In one example of the disclosed technology, a method includes generating an event tree model of a timing-attack on a synchrophasor system architecture. The event tree model can be based on locations and types of timing-attacks, an attack likelihood, vulnerabilities and detectability along a scenario path, and consequences of the timing-attack. A cyber-risk score of the synchrophasor system architecture can be determined using the event tree model. The synchrophasor system architecture can be adapted in response to the cyber-risk score.

Pal, Seemita↗

ON THE LANGUAGE OF RELIABILITY: A SYSTEM ENGINEER PERSPECTIVE

In its classical definition, risk is defined by three elements: what can go wrong, what are its consequences and how likely is it to occur. While this definition makes sense in a regulatory based framework to estimate risk associated to power plants (in terms of core damage frequency and large early release frequency), this approach does not provide a useful snapshot of the health of the plant. A possible alternate path can start by redefining the word “risk” to a broader meaning that better reflects the needs of a system health and asset management decision making process. Rather than asking how likely an event can occur (in probabilistic terms), we can ask how far this event is from occurring. We will show how, given the data available from plant equipment reliability and monitoring/diagnostic/prognostic centers, a margin can be described and determined for all type of maintenance approaches (e.g., corrective or predictive maintenance). We will show how to link SSC margin-based reliability models to system reliability models (i.e., fault trees) in order to assess system/plant health and how to perform margin-based system calculations. These calculations are not solved using classical probabilistic calculations applied to sets (as performed by any PRA code) but, instead, through metric spaces operations (i.e., distance/margin based approach).

97 - MATHEMATICS AND COMPUTING↗

Graphene nanoplatelets reinforced cement as a solution to leaky wellbores reinforcing weak points in hydrated Portland cement with graphene nanoparticles improves mechanical and chemical durability of wellbore cements

In this work, to improve the performance of wellbore cement under subsurface environments, graphene nanoplatelets (GNPs) were added in various percentages to Class-H cement slurry. Microstructural characterization of cement slurries cured at 90 °C and 95% RH indicates that GNP modifies the microstructure of hydrated cement by reinforcing pore spaces. As a result, the mechanical properties, such as Young's modulus and axial peak stress, obtained from high temperature triaxial compression tests are significantly improved based on different percentages of added GNPs. Furthermore, the hydrated 1 × 2 inch GNP- Portland cement cores tested under simulated deep wellbore conditions of high-temperature and high pressure (HTHP), appear to have a ductile-like behavior, when compared to a typical brittle nature of Portland cement pastes. From our observations and published data on graphene resistance to fracture, GNP addition to cement is evidently enhancing the flexibility of cement. These improvements would reduce the risks associated with wellbore cement deterioration and a consequent leakage in fossil fuel production, geothermal energy production, CO 2 storage as well as long-term sealing materials in plugging and abandonment of all wellbores at the end of their service life.

36 MATERIALS SCIENCE↗

Smart Microgrids

The Nation’s electrical power depends on one bulk power grid to support security and economic prosperity. According to the Department of Homeland Security’s Homeland Threat Assessment of 2020, the largest cyber threat to homeland security is potential disruption to critical infrastructure, including power grids. Critical infrastructure includes the physical and cyber systems which generate, transmit, and distribute electricity with an impact on economic security, public health, or safety. The surety of the Nation’s power grid is vital for providing essential services and would put the population at risk if disrupted. Power outages can have catastrophic consequences for critical organizations such as hospitals and military installations. Additionally, the current fossil-fuel dependent power grid is extremely fragile and vulnerable to overloads, storms that destroy power lines, and cyber-attacks.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Integration of Control Methods and Digital Twins for Advanced Nuclear Reactors

Advanced nuclear reactors offer a new set of features to energy generation, due to their ability to adapt to variable energy demand, operate autonomously, be deployed in rural locations and monitored remotely, afford compact size and lower power ratings, and rely on novel technologies to achieve safer operations. Thus, a requirement for the success of these reactors is the use of intelligent forms of control to track changing power demands, make autonomous decisions, and reduce the need for human involvement. Regulatory requirements pertaining to control of nuclear reactors could be met via historical means of control; however, these are not expected to enable the level of highly autonomous operations desired in advanced nuclear reactors. Historical control methods rely on both logical and high-performance (HP) control. These two types of control are usually used separately, with a human element being introduced whenever decisions are cascaded from one science to another. AI/ML control, on the other hand, can replace the human element in the current U.S. fleet of nuclear power plants (NPPs) by acting as a supervisory optimizer that understands the plant internal/external variables in order to make control decisions, and can easily handle non-linear and multi-input/multi out (MIMO) decisions—another requirement for advanced nuclear reactors that could be difficult to handle via logical and HP control. Because of the harsh operating environments produced in advanced reactors, resulting in the frequent failure of sensors and other types of equipment, and considering the lack of operating history for advanced nuclear reactors, control of advanced nuclear reactors would necessitate relying on a model that can track and adapt to the actual process (i.e., a digital twin). This digital twin can make approximations when knowledge and data are unavailable and would evolve as more knowledge is gained. The reactor control must also be risk-informed to account for the high-consequence nature of advanced reactors. This report introduces a high-level (i.e., not method- or process-specific) integration of the three different control and digital twinning methods able to meet the requirements for advanced nuclear reactors. These methods could be applied during both the operational and design stages of these reactors. The aim is to demonstrate how each method interfaces with and highlights enabling solutions necessitated by the unique features of advanced nuclear reactors.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Comprehensive Battery Safety Risk Evaluation: Aged Cells versus Fresh Cells Upon Mechanical Abusive Loadings

Abstract Despite their wide applications, lithium‐ion batteries (LIBs) have been struggling with their safety risks arising from different lifetime stages. Here, the NCMA pouch cell is taken as an example, and the safety of both fresh and aged cells from three milestone stages, that is, internal short circuit (ISC) triggering risk, ISC mode, and the subsequent thermal runaway (TR) consequence is investigated. By combining mechanical abusive testing and physics‐based models on commercialized cells with various states‐of‐health (SOH) and states‐of‐charge, it is discovered that the ISC triggering delays with the decay of SOH and soft ISC mode will be triggered more frequently, which is mainly due to the mechanical behaviors of the current collectors. The temperature rises and peak temperature during the subsequent TR also become milder for aged cells due to the reduced capacity and deterministic soft ISC process. Results here provide a mechanistic explanation of the safety risk comparison between the fresh and aged cells, offering cornerstone guidance to the evaluation and design of next‐generation safer LIBs.

25 ENERGY STORAGE↗

Safety Basis Compliant Flexible Operations [Capstone Project]

Compliant nuclear operations must be weighed against the radiological risk to the worker, public, and the environment. This project set out to look at one facility at Los Alamos National Laboratory (LANL or the Laboratory) and compare the risk with the operational restrictions associated with the Technical Safety Requirements (TSRs). The hope was to identify controls that could be reduced or simplified while maintaining compliance with 10 CFR 830, Nuclear Safety Management. This would result in increasing facility operational flexibility and efficiency. Controls were identified to be simplified or eliminated based on risk. This identification was initially envisioned from the perspective of reanalysis of the accident and hazard analysis consequences. Additionally, it was envisioned that fire testing could show that the consequences of a fire are not as dramatic as analyzed. Specific facility controls were identified that cause operational inefficiencies. Based on data collection, two controls were identified for further evaluation. The first control was combustible loading within the waste storage buildings, and the second control is related to the seismic power cutoff switch. In evaluating the combustible loading control, the thought is that the fire suppression system (FSS) provides adequate protection and the combustible loading controls do not need elevation to a TSR control. The FSS, along with the Fire Protection Program, would provide protection to prevent a fire from impacting large amounts of stored waste material. The seismic switch was more of a challenge. When reviewing the facility operation, it was determined that the facility does not operate anywhere near the established material-at-risk (MAR – radioactive material) limits. By adjusting these limits, a reduced consequence could be achieved and hence, a significant risk reduction achieved. A new operating mode would be used to achieve this reduction. A reduced MAR limit was successfully used as a test case for snow removal during this project. This project expands on that trial case as related to combustible loading and the seismic power cutoff switch TSRs. This will increase the efficiency of operations with reduced TSR controls while reducing overall facility risk. This is a win-win situation for Triad National Security, LLC (Triad) and the U.S. Department of Energy (DOE). Due to schedule and budgetary constraints, not all envisioned work scope was accomplished. However, it is maintained in this report for future efforts.

61 RADIATION PROTECTION AND DOSIMETRY↗

Emulation and Adversarial Analysis of EV Charging Networks

In the effort of decarbonization and evolution of the modern electrical grid, electric vehicles (EVs) play a key part to transform the grid. However, due to the rapid adoption of EVs and the demand of the charging infrastructure required to power said EVs, risk of a cyber-attack may impose serious consequences. There is a need to analyze and protect the charging ecosystem infrastructure from cyber threats before it reaches wide-scale deployment. In an effort to secure vehicle to grid (V2G) communications, standardization is necessary for continued reliable system operation. The protocol ISO 15118 outlines controls and practices that should be implemented for secure vehicle to grid (V2G) communications. The standard is gaining momentum for American markets as the demand for EV infrastructure grows. The adoption of ISO 15118 in American markets poses several challenges: the deployment of a public key infrastructure (PKI) as outlined within the standard, interoperability of charging different EVs with chargers from different manufactures using the PKI, and scaling the ecosystem to meet the demand while managing risks. This project was created to understand potential cyber and scaling challenges of PKI for EV infrastructure through utilizing a series of emulated components mapping to what exists in the EV ecosystem today, and the components of the PKI that are under development. The key nodes within the emulation that are under development are: electric vehicle (EV), electric vehicle supply equipment (EVSE), charge network operator (CNO), certificate authority (CA), and online certificate status protocol (OCSP) that must all interact using secure and trusted communications. With these emulated components and utilizing orchestration methods to rapidly deploy and scale the components, the ability to analyze risks of the ecosystem and address gaps before the PKI ecosystem is fully deployed to production should yield a more robust and mature production charging infrastructure. Our approach will use a modular architecture of virtual machines within an orchestration platform and will target scales of 100s, 1000s, and 10,000s of entities interacting. The core research questions trying to be answered with this scope of work are: what are the impacts of a rogue CA, what are the risks of certificate revocation list (CRL) management, what is the value of OCSP stapling, what components are vulnerable to DOS attacks, and what test effective payloads may impact the components.

charging ecosystem↗

Defensive Cybersecurity Architecture Design Using Force-on-Force Cyber-Physical Modeling

Currently, nuclear power plant physical security systems are highly dependent on air-gaps as a protective measure against cyber-threats. Cyber-physical threats become more likely as advanced cyber-threat capabilities to jump air-gaps transition into common use. Defending against the emerging threat of cyber-enabled physical intrusions is poorly understood. The consequence of these cyber-physical attacks has no quantitative analysis method to inform risk-informed, performance-based cybersecurity approaches. By modifying the physical security simulation tool Dante, cyber-physical threat consequence was able to be analyzed on a notional facility. The results of this analysis are used to design a Defensive Cybersecurity Architecture (DCSA) for the physical security system to produce example resilience measures for this notional facility. A DCSA defines security levels to provide a graded approach for defending plant functions, and security zones for trusted communication between systems. This approach can be applied to real world systems to produce physical protection systems and response measures that are resilient to cyber-physical threats.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Energy storage planning for enhanced resilience of power systems against wildfires and heatwaves

Extreme weather events pose significant risks to power grid stability due to their severe consequences and potential for widespread failures. Energy storage systems hold great potential for enhancing grid resilience against such events by providing reliable power during peak demand periods. However, accurately quantifying the size, location, and investment costs of new energy storage assets is a complex task, as energy storage planning decisions depend on the investment choices of other generation technologies and the integration of new transmission projects. Here, this paper presents a novel capacity expansion planning framework that simultaneously optimizes investments in energy storage, generation, and transmission, determining their optimal size, location, and type, while incorporating extreme weather events into long-term planning. More specifically, our stress-event-informed planning framework integrates the impact of heatwaves and wildfires into the planning process, identifying least-cost investment solutions that comply with policy goals and enhance grid resilience. The proposed framework employs machine-learning-based modeling to project heatwave-induced loads and performance-based risk assessment to evaluate wildfire-driven transmission line derates. Using industry-standard datasets to accurately represent the transmission topology of the Western Interconnection (WI) system, the proposed framework is applied to the WI 40-zone system, with investment decisions reported for the years 2030, 2035, and 2040. Simulation results reveal that with just a 10% increase in investment costs, resilience against extreme events can be significantly improved, with investment decisions heavily favoring energy storage, particularly 4-hour energy storage systems.

25 ENERGY STORAGE↗

Biological Consequences of Marine Energy Development on Marine Animals

Marine energy devices harness power from attributes of ocean water to form a sustainable energy source. Knowledge gaps remain about whether marine energy systems can affect the environment, adding another threat to animal populations and habitats already under pressure from climate change and anthropogenic activities. To date, potential environmental effects have been studied under the scope of stressor–receptor interactions, where moving parts of, or emissions from, a system could harm the animals, habitats, and natural processes. While crucial for understanding effects and identifying knowledge gaps, this approach misses a holistic view of what animals may experience in the presence of marine energy systems. We look at six biological consequences and forces that drive the health of an animal population and the effects expected from marine energy development: success of early life stages; changes in competitive capabilities; growth and survival based on food availability; susceptibility to predators; injury or death; and reproductive success. We use case studies to develop this approach, focusing on a variety of marine animals. An approximate level of risk is assigned for each interaction based on the biological consequences. This work highlights the need to examine the effects of marine energy development on animal populations within their natural habitats.

16 TIDAL AND WAVE POWER↗

The impacts of rising vapour pressure deficit in natural and managed ecosystems

Abstract An exponential rise in the atmospheric vapour pressure deficit (VPD) is among the most consequential impacts of climate change in terrestrial ecosystems. Rising VPD has negative and cascading effects on nearly all aspects of plant function including photosynthesis, water status, growth and survival. These responses are exacerbated by land–atmosphere interactions that couple VPD to soil water and govern the evolution of drought, affecting a range of ecosystem services including carbon uptake, biodiversity, the provisioning of water resources and crop yields. However, despite the global nature of this phenomenon, research on how to incorporate these impacts into resilient management regimes is largely in its infancy, due in part to the entanglement of VPD trends with those of other co‐evolving climate drivers. Here, we review the mechanistic bases of VPD impacts at a range of spatial scales, paying particular attention to the independent and interactive influence of VPD in the context of other environmental changes. We then evaluate the consequences of these impacts within key management contexts, including water resources, croplands, wildfire risk mitigation and management of natural grasslands and forests. We conclude with recommendations describing how management regimes could be altered to mitigate the otherwise highly deleterious consequences of rising VPD.

54 ENVIRONMENTAL SCIENCES↗

Risk Management and Risk Aversion, from Benefit to Impediment

Risk management is a critical tool for improving the probability of project success by identifying, assessing, prioritizing, and attempting to control threats to project realization. For industries that require high operational reliability due to the potential consequences of off-normal events, such as the nuclear, aerospace, and chemical sectors, a major focus of risk management is the preservation of process safety. Due to the nature of the processes or systems under consideration, the associated process safety analyses (such as risk and safety assessments) and safety features can require significant resources. These costs are typically tolerated either due to the need to satisfy regulatory requirements or based on the assumption that they generally decrease the occurrence of unwanted events and therefore improve the probability of project success. However, as the level of acceptable or tolerable risk from unwanted events decreases, the required resources necessary for ensuring and demonstrating satisfaction of these criteria can grow and in turn can become one of the dominant impediments to project success. This paper outlines a high-level theoretical framework for the consideration of dominant project risks, which includes potential project failure from both the occurrence of high consequence off-normal events and the inability to achieve project completion due to the resource needs and innovation losses associated with extreme risk aversion. Utilizing such an integrated approach permits an attempt to optimize the probability of successful project realization while also providing valuable insight into the proper level of acceptable risk. The work is presented as a first step, in hopes of spurring additional discussion and analysis regarding appropriate levels of risk tolerance and the balance of project benefits.

Grabaskas, David↗

Survey of Cyber Risk Analysis Techniques for Use in the Nuclear Industry

Using traditional probabilistic risk analysis methods for severe accident safety risk management on non-digital systems, structures, and components at nuclear power plants is well-established. In contrast, cyber risk analysis of digital assets is still an immature field with unproven techniques due, in part, to the continuously changing threat environment and the challenge of digital assets failing in unexpected ways. As the nuclear fleet continues to adopt digital instrumentation and control systems, it is increasingly important to have effective and efficient cyber risk analysis techniques to support risk management decisions, such as risk elimination by system redesign or risk mitigation by implementation of prioritized security controls. To understand the state of the art in cyber risk analysis for future research, we surveyed 36 publications across ten application domains. We describe our survey methodology and rate each technique based upon scope, adoptability, and repeatability. In this work, we examine the unique constraints of the nuclear industry and outline the strengths and weaknesses of using the cyber risk analysis techniques in the industry, highlighting gaps with current techniques. We also discuss challenges and potential research directions for advancing the science for both existing and new advanced reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Quantitative Risk Assessment for Fuel Cell Electric Bus Hydrogen Storage and Refueling Facility

It is necessary to understand the safety implications and risk mitigation options for fuel cell electric bus fleet deployment, especially for related facilities responsible for operations such as production, storage, compression, and dispensing of hydrogen for use by the buses. In this report, we present a quantitative risk assessment for a potential fuel cell electric bus fleet that was motivated by efforts to improve resilience at the Portland International Airport but can be applicable to a range of hydrogen case studies and use cases. We estimated risk for a facility that produces, stores, compresses, and dispenses hydrogen for the fleet of buses, with a focus on individual risk to people in terms of annual frequency of fatality. We considered the frequency of hydrogen leaks that could result in harmful physical outcomes like jet fires or explosions, and the consequences of those outcomes for people. We created customized fault trees to calculate the frequencies of different sizes of leaks and event sequence diagrams to calculate ignition probabilities for the various leak sizes. We also leveraged the HyRAM+ toolkit to use these inputs to calculate overall risk for the facility, which we separated into one section responsible for producing, storing, and compressing hydrogen, and one section responsible for dispensing the hydrogen to the buses. We found that the dispensing area seemed to have a higher risk than the production/storage/compression area of the facility, largely because of the inclusion of a component with a high leak frequency (the heat exchanger used to cool the hydrogen before entering the vehicle, to prevent overheating and expansion of hydrogen in the onboard tank). For the example production and refueling facility we evaluated and the data we used for the analysis, the leak frequency had a larger impact on the risk differences between the two sections on the facility, compared to the physical outcome consequence, which was slightly different due to the varying fuel conditions, but not substantially different. Actions can be taken to prevent these hazards (e.g., lowering leak frequencies in system components) or to mitigate the consequences if they do occur (e.g., installing barriers to protect people if ignition events occur). The choice of which actions to take depends not only on safety considerations but also on space, time, staffing, feasibility, and financial constraints. Therefore, the quantitative risk assessment approach can help understand relative risk contributions from different components, leak sizes, consequences, and human actions, to prioritize risk reduction strategies and balance these parameters. The outcomes of this report may be useful for a variety of stakeholders working in the hydrogen, transportation, vehicle, and aviation sector, including those responsible for aspects like facility design, operations, and regulations. There is not a single value of risk that determines whether a hypothetical system is “safe” or not. The insights about risk mitigations may be leveraged, and the quantitative risk assessment approach can be applied to other case studies to understand risk priorities and contributions specific to different FCEB and hydrogen facility uses.

08 HYDROGEN↗

Identifying University Chemicals That Pose Security Risks: A Simple Qualitative Approach

Various laboratory-focused tools and methodologies for completing a safety risk assessment have been published, yet few similar resources to address chemical security exist. Herein, we describe a chemical security risk assessment case study at a university in a developing country. In this case study, we demonstrate a chemical security risk assessment for a university chemistry department, using an original inventory of 645 entries which was condensed to 295 chemicals after removing duplicates and erroneous entries. We then prioritized to highlight 83 chemicals of interest based on hazardous or dual-use properties that could lead to unacceptable consequences. We further refined to a list of 34 high-risk chemicals that required action, 48 chemicals that may need further justification and consideration for additional protection, and 1 chemical that did not need further consideration for additional protection.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗