CYBER SECURITY CONSEQUENCE PRIORITIZED DESIGN VIA SIMULATION
Explore the source record for details and available documents.
Hahn, Andrew Stuart↗
SEARCH · Search NASA
Results for “Consequence - Focused Design”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
CYBER SECURITY CONSEQUENCE PRIORITIZED DESIGN VIA SIMULATION
Explore the source record for details and available documents.
Hahn, Andrew Stuart↗
Characterizing and improving the performance of molten-salt-steam heat exchangers in concentrating solar power plants
Shell-and-tube heat exchangers (HXs) for steam generation from molten salts in concentrating solar power (CSP) plants experience thermal fatigue due to significant temperature gradients and inherent transient operation. Molten salt-steam HX design lifespans exceed actual lifespans, and, as a consequence, designers overpredict plant profitability and operators neglect appropriate prescriptions to optimize these lifetimes. Here, this study refines HX lifespan estimates with data benchmarked against thermal-fluid mechanical modeling of stress and accumulated fatigue. Reduced-order thermal models of the molten salt-steam, shell-and-tube evaporator and superheater predict transient temperature profiles along the two HXs salt-steam flow paths. The modeled evaporator and superheater temperature profiles enable assessment of cyclic stresses within the HX tubesheets, where molten-salt HX failures are most common. Evaporator and superheater performance data from a current 110 MW elec commercial CSP plant provide a basis for validating the reduced-order HX models. HX life predictions derived from stochastic failure distributions serve as inputs for simulating and optimizing existing plant operations. The impact of the updated lifespans on overall plant revenue depends on operating scenarios. This study suggests that typical ramping rates for a CSP plant with a high-temperature Rankine cycle result in an evaporator and superheater life of approximately 10 and 25 years, respectively, compared to the design target of 30 years. Reduced HX lifespans decrease operational plant revenue on average by 4.6-5.1%. Furthermore, there may be as many as four HX replacements over the 30-year lifetime of the plant; and, purchase agreement loss due to failure to meet contractual production requirements can have ramifications that include the risk of bankruptcy.
14 SOLAR ENERGY↗
FENIX: Towards a Fully Integrated Multiphysics Framework for Plasma Facing Component Modeling
Computational tools have a crucial role to play in accelerating the deployment of fusion as a clean, reliable, abundant, and sustainable energy source. Multiphysics, high-fidelity simulation capabilities can help model, study, and predict intricate interactions between materials performance, plasma exposure, neutron irradiation, and engineering processes. As such, they can assist in the resolution of scientific and engineering challenges underpinning design, construction, and commission of fusion power plants. To address these needs, ongoing efforts are leveraging the Multiphysics Object-Oriented Simulation Environment (MOOSE) framework and delivering new computational tools for the fusion community. These tools inherit crucial attributes from MOOSE. They are open-source, modular, integrated with nuclear industry-standard software quality assurance processes, and enable multiphysics, multi-fidelity, fully integrated, zero- to three-dimensional, and massively parallel simulations. After a short overview of these capabilities, we will present the development of Fusion ENergy Integrated multiphys-X (FENIX), a MOOSE-based application designed to enable plasma facing component design and performance evaluation. Throughout their lifetime, plasma facing components are exposed to extreme thermal loads, repeated thermal shocks, and irradiation by plasma ions, neutral particles, and high-energy neutrons. Consequently, designing a plasma facing component with acceptable lifetime degradation is extremely challenging. FENIX aims to model the multiphysics environment in which plasma facing components evolve to accelerate their design studies. To that end, FENIX couples existing MOOSE capabilities such as heat transfer, thermomechanics, and thermal hydraulics, with tritium transport via the MOOSE-based Tritium Migration Analysis Program, Version 8 (TMAP8), with neutronics via the MOOSE-based high-fidelity neutron-photon transport and fluid dynamics code Cardinal, and finally with Particle-in-Cell plasma simulation capabilities being developed in this project. In this study, we present the current FENIX capabilities and preliminary results of its application to model the Tritium Plasma Experiment set up at Idaho National Laboratory.
70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DS-TIDE: Harnessing Dynamical Systems for Efficient Time-Independent Differential Equation Solving
Time-Independent Differential Equations (TIDEs) are central to modeling equilibrium behavior across a wide range of scientific and engineering domains, from electrostatics to porous media flow. Conventional numerical solvers offer reliable solutions but incur significant computational costs due to fine-grained discretization and iterative procedures. Machine learning-based approaches address this by replacing iterative solving processes with one-time inference; however, their sophisticated models require extensive training resources that often exceed those of traditional solvers. Consequently, designing a TIDE solver that achieves high accuracy, broad applicability, and exceptional computational efficiency remains a fundamental challenge. In this paper, we propose DS-TIDE, a novel hardware solver that is inspired by, and subsequently leverages, the intrinsic connection between Dynamical Systems (DS) and Differential Equations (DEs) to efficiently and accurately solve TIDEs. DS-TIDE employs a CMOS-compatible DS-based processor, whose physical states evolve under carefully designed DE-driven dynamics and naturally converge to equilibrium -- the solution of the target TIDE -- within ~1µs on a ~1-watt DS-TIDE processor. To enhance expressivity, DS-TIDE incorporates Heterogeneous Dynamics with Temporal Layering (HDTL), which solves TIDEs through a three-stage DS evolution -- conditioning, solving, and decoding -- each governed by specialized dynamics. The entire evolution process is analogous to an infinitely deep neural network temporally unrolled, offering the system the capability of representing complex equations. Furthermore, DS-TIDE is equipped with an on-device DS-DE Auto-Alignment mechanism that dynamically adapts intrinsic hardware dynamics within milliseconds, effectively aligning the system’s dynamics to diverse target DEs. Experimental results across TIDEs from a wide range of scientific and engineering domains demonstrate that DS-TIDE achieves ~10^3× speedup, ~10^5× energy savings, and competitive or superior accuracy compared to state-of-the-art numerical and ML-based solvers.
Liu, Chuan↗
Advanced Reactor Designs Security Analysis, Risk, and Recommendations: Risks, Consequences, and Possible by-Design Mitigation Approaches Associated with Select Advanced Reactors
Next-generation advanced reactors (ARs) incorporate enhanced safety systems, have smaller source terms, and feature compact modular designs, which should lessen their collective risk profiles. However, to fully evaluate risk, security needs to be a part of the equation. Without taking security into consideration, safety systems and components in the new ARs may be vulnerable to sabotage. These base attributes, coupled with enhanced security features specific to AR design through sound engineering and security-by-design (SeBD), should provide developers and operators with lower inherent security risk profiles. Building security early into the AR design may remove or passively secure potential critical targets from an adversary’s reach , thereby increasing overall safety and security. An integrated approach and diverse design team that includes engineering, operations, and security experts are fundamental to building security into the design without sacrificing fundamental operational efficiencies and principles. The objective of this project was to evaluate the security and safety interfaces for five classes of reactors, identify potential security vulnerabilities of structures, systems, and components (SSC), and underscore the need to consider security alongside safety in the design o f these concepts. The five reactor classes evaluated in this project and presented in this report are molten-salt reactors (MSR), high temperature gas reactors (HTGR), sodium-fast reactors (SFR), advanced light-water reactors (ALWR), and microreactors. These designs were selected because they reflect the concepts that are closest to market deployment and have received significant resource investments from the public and private sector. This project assesses the inherent security risks posed by common classes of ARs, provides a methodology and framework to assess security along with safety, and offers an analysis of potential mitigation strategies that could be incorporated. For each AR technology, the SSCs that relate to radionuclide source safety functions are discussed to understand the SSC contribution to safety and relative importance in the protective strategy for the design. The assumptions that went into evaluating each reactor concept originated from generic publicly available nonproprietary information and should not directly be used to qualify an absolute risk profile nor to rank specific AR designs. Instead, the purpose of the analysis is to understand and compare the generic inherent security risks of different AR technologies.
98 - NUCLEAR DISARMAMENT, SAFEGUARDS, AND PHYSICAL↗
Fuel Behavior Implications of Reactor Design Choices in Pressurized Water SMRs
Small pressurized water reactors (PWRs) can feature boron free operation, natural circulation mode, reduced height assemblies and/or long refueling cycles. This paper attempts to explore core design optimization for each of these design evolutions. In consequence, five core design layouts are developed incorporating boron free operation with continuous control rods insertion, natural circulation with low burnup/low power density design, natural circulation with high burnup/low power density design, forced circulation with standard core power density design, and forced circulation with high power density design. These cores’ performance is compared to a standard 4-loop PWR. The design process aims to improve the fuel cycle cost under safety constraints through core design optimization using CASMO4E/SIMULATE3 reactor physics codes and FRAPCON4.1 fuel performance assessment tool. Core modeling assumes standard 17x17 PWR fuel assemblies loaded with low enriched uranium (LEU) up to 5wt% or LEU+ (i.e., below 10wt% enrichment) pellets with gadolinium oxide (Gd2O3) as the burnable poison. Satisfactory core and fuel performances are obtained for all the designed cores under steady state and considered overpower transients. For low power density operation, long cycle lengths are achieved reaching a 2.5- and a 5-year cycles and peak rod-average burnup is pushed to 83 MWd/kgU. Other cycle lengths are maintained at 18 months. Boron free operation exhibits the ability to achieve longer cycle lengths at the cost of higher peaking factors leading to high local power and fuel temperatures which prevents sizable power uprates and is deemed uneconomical. Fuel assembly height reduction allows coolant velocity retrofit which enables higher core power density without violating structural integrity of the fuel assembly. As a result, a core power density of 123 kW/l is reached where total cladding hoop strain becomes the limiting parameter.
21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
Consequence analyses of sabotage-induced radiological releases in high-temperature helium-cooled prismatic microreactors
Here, this study analyzes the radiological dose consequences of sabotage-induced accidents at three high-temperature helium-cooled prismatic microreactors (HTPMs) with thermal power ratings of 1, 10, and 50 MWt. Each HTPM employs uranium oxycarbide tristructural isotropic fuel enriched to 19.75 wt% high-assay low-enriched uranium. Simulations were conducted to estimate reactor core inventory at the point of fuel discharge––when the effective multiplication factor reduced to less than 1––representing peak radionuclide inventory. Postulated sabotage scenarios leading to reactor shutdown were analyzed at two intervals: immediately post-shutdown (0 h) and 3 days after shutdown using the SCALE code for radionuclide inventories and the RASCAL tool for dose consequences. Results show that although HTPMs benefit from inherent safety features and robust fuel design, radiological consequences scale with reactor power because of increased source term inventories. Smaller microreactors exhibited proportionally lower dose consequences. To support the economic and regulatory feasibility of microreactor deployment, this study emphasizes the value of a risk-informed, performance-based approach, as supported by regulations like 10 CFR Parts 100 and 53 in the United States. Microreactor developers should perform site-specific assessments of potential sabotage or low-probability, high-consequence events, especially when considering minimal on-site or full off-site emergency response.
Consequence↗
Moving from Information Assurance to Functional Assurance with Engineered Controls
Cyber threats to operational technology demand more than traditional IT defenses—they require full-spectrum mission assurance. Cyber-Informed Engineering (CIE) is an approach that embeds engineered controls into system design to ensure critical functions remain safe and reliable, even under attack. Unlike conventional cybersecurity tools, engineered controls act directly on physical processes to prevent unacceptable outcomes such as equipment damage or mission failure. This session will outline the CIE framework and share examples of consequence-based design that deliver true resilience, not just fail-safe behaviors. Attendees will learn how to integrate these principles into the engineering lifecycle to support resilient-by-design architectures and inform emerging standards. This talk sets the stage for the panel discussion on advancing CIE across sectors as digital and physical systems converge.
24 - POWER TRANSMISSION AND DISTRIBUTION↗
An integrated in-situ coordination strategy enabling high-performance layered cathodes for sodium-ion batteries
O3-type layered transition metal oxide cathodes hold tremendous potential in sodium-ion batteries (SIBs) due to their low cost and high energy density. However, the structure instability associated with detrimental phase transitions and severe interface parasitic reactions exacerbate the material's electrochemical performance degradation. Herein, we develop an integrated in-situ coordination strategy via heteroatomic modulation inducing coherent epitaxial layer to collaboratively enhance the overall framework robustness from surface to bulk. The theoretical calculation and multiple in/ex-situ characterizations demonstrate the charge density around oxygen is redistributed, which promotes the electron localization, thus widening the NaO 2 lattice space and accelerating the Na + transport dynamics. Furthermore, the formed strengthened oxygen bond energy effectively distributes the long-range coordination of Mn 3+ O 6 octahedron, thereby alleviating Jahn-Teller distortion and local stress. Importantly, the in-situ formed conformal buffer layer dramatically relieves the adverse interface side reactions, facilitating the construction of robust cathode-electrolyte interface, which ameliorate the whole structure stability of designed materials. Consequently, the optimized NFMZ@NZO-1.0 exhibits the excellent cycling stability with 80.2% capacity retention after 300 cycles at 1C, and delivers a high discharge capacity of 107.1 mAh g −1 at 10C. In conclusion, this distinctive coupling strategy provides valuable insights for developing high-performance layered cathode materials in SIBs.
Coherent epitaxial layer↗
Analytical and Performance-Based Evaluation Alternatives to Full-Scope, High-Fidelity Testbeds
One consequence the design and operational differences of advanced reactors is that integrated system validation (ISV) using full-scope, high-fidelity testbed might not be cost-justified or practical. The absence of traditional ISV may pose an issue for the conduct of safety evaluations since it may leave regulators without the information derived from this performance-based testing. The purpose of this research is to identify analytical and performance-based test and evaluation methods that are alternatives to full-scope, high-fidelity testbeds that have traditionally been used for ISV. We developed a method to test validation based on a multi-stage validation (MSV) framework. MSV is an approach to meeting validation objectives through incremental, successive validation activities beginning in the early stages of the design process and continuing through the later stages. MSV doesn't rely solely on late stage validation, rather it accommodates the use of a broad spectrum of analytical and performance-based information and a diversity of testbeds. In addition, MSV embraces the use of information from other types of evaluations and analyses.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)
The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)
42 ENGINEERING↗
Comparative Assessment of Radiological Consequences from Sabotage-Induced Releases in Diverse Microreactor Designs
Many microreactor design developers are planning to reduce on-site physical protection measures and emergency planning zones by relying on robust fuel and reactor designs and leveraging passive safety systems. These reductions raise the risk of sabotage at these microreactors. To evaluate these requirements, this study assessed the radiological consequences of sabotage-induced accidents at microreactors. For the assessment, five diverse designs, each producing 30 MWt, were considered. These designs included pressurized water microreactors (PWMs), sodium-cooled fast microreactors (SFMs), high-temperature helium-cooled prismatic microreactors (HTPMs), heat pipe–cooled microreactors (HPMs), and molten salt–cooled microreactors (MSMs). For each design, two postulated sabotage-induced accidents were defined along with the associated release percentages of fission products. Additionally, consequences from the release of activation products were assessed. With regard to evaluating physical protection and emergency planning requirements, the consequences of sabotage-induced accidents for each design type were found to be comparable. The differences were primarily because of the distinct fuel forms (and associated release mechanisms), burnup, and neutron spectra of the different microreactor types. Future effort will further investigate the release percentages of fission products to perform accurate dose consequence assessment.
22 GENERAL STUDIES OF NUCLEAR REACTORS↗
Overcoming sparse datasets with multi-task learning as applied to high entropy alloys
Abstract The design of novel High Entropy Alloys for use in high-temperature applications is an area of active interest due to their potential to provide exceptional properties compared to conventional alloys. Since the increased popularity of machine learning, an important cog in the design process has been training surrogate models on alloy properties. However, these Single-Task models are trained on individual mechanical properties and do not take advantage of the relatedness between properties. Multi-Task models can capture the interdependencies between tasks, leading to potentially more accurate predictions for all tasks. In this paper, we investigate if Multi-Task models can show improvement over Single-Task models when used for predicting the mechanical properties of these alloys. To ensure fair evaluation between the models, we apply L 0 regularization and skip connections to the models, which allows them to adjust the number of model parameters and depth for optimal performance. We find that the Multi-Task models can leverage task relationships to perform better than Single-Task models, especially for high amounts of missing data in the tasks. Furthermore, adding simple auxiliary targets can boost Multi-Task performance even further despite not being effective as input descriptors to single-task models themselves. We anticipate that the proposed strategies can achieve more accurate predictions and consequently enable better design capabilities for such data-constrained domains without incurring much additional computational cost.
Debnath, Arindam (ORCID:0000000194274499)↗
Reduced-Order Modeling of Hydrogen Releases from Vent Stacks and with Wind Effects
Here, the physical release behavior of hydrogen is important to understand from a safety and design perspective. The consequences of unignited pressurized gaseous hydrogen plumes exiting vent stacks were considered by extending and modifying existing general hydrogen plume models. Entrainment, vent stack backpressure, and the flow regime of hydrogen exiting the vent were found to be significant factors affecting plume shape and size, but further investigation and validation with unchoked, low-Froude-number flows is recommended to improve the model’s robustness. Additionally, models for the effects of wind on unignited plume momentum and entrainment were added to explore this behavior. Wind was assumed to increase mixing of hydrogen with the ambient air, and to affect the momentum of the released jet. Introducing wind into the plume model led to a shorter plume for all wind and jet directions. A high counter-flowing wind led to non-physical results and challenges in interpreting the visualization. The proposed jet plume wind sub-models (specifically entrainment coefficients) were fit and compared to experimental data of different releases of hydrogen into a wind tunnel, but the quantity of data available and experimental conditions were limited. Thus, collection of more empirical data and for a wider range of conditions is recommended for improvement of the proposed computational models. Developing reduced-order models for these physical phenomena can improve accessibility to predicted physical behavior and the rate at which hydrogen systems can be safely designed and deployed.
entrainment↗
A monolithic antineutrino detector for non-intrusive reactor monitoring
Recent advances in organic detection media have found applications in reactor antineutrino physics. One example is the Precision Oscillation and Spectrum Experiment (PROSPECT), which leveraged pulse-shape sensitivity to enable a successful surface deployment at the High Flux Isotope Reactor (HFIR), achieving a signal to background of 4:1. PROSPECT utilized almost 4 tonnes of 6 Li-doped pulse-shape sensitive liquid scintillator in a two-dimensional segmented array. It used a combination of pulse-shape sensitivity and position sensitivity via segmentation to reduce the most prominent form of correlated background for surface detectors — cosmogenic fast neutrons. These new liquids may enable detector designs that bring additional tools for reducing backgrounds while reducing engineering complexity. In this paper, we present an investigation into a detector design that exploits properties of these liquids by maximizing spectral and pulse-shape sensitivity via highly efficient photon detection. The detector utilizes photomultiplier tubes (PMTs) placed at the top and bottom of a right cylinder, with highly reflective white walls. This design sacrifices some position sensitivity for maximal photon efficiency. In conclusion, the design choice has consequences for the identification of the background and antineutrino sensitivity, which we examine.
Pulse shape↗
A Framework for Building Security into the Design Process
This report presents guidance to support the implementation of security objectives during the design process for nuclear facilities using an organization’s quality management system. The guidance in this document is intended for design vendors and operators of nuclear power facilities. Additionally, this guidance document can be beneficial to regulatory bodies, industry partners, customers, and other stakeholders within the nuclear power market. This report aims to ensure security consequences are identified before designs are completed, which may lead to reduced costs and higher security effectiveness and efficiency.
11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
Defining Infrastructure Feasibility for Hub-Scale Offshore Atlantic Carbon Storage in the Northeastern United States
In the Northeast U.S., deep rock formations along the Atlantic outer continental shelf may have the potential to sequester 150–1136 million metric tons of CO2. However, the design and infrastructure necessary to develop offshore carbon storage in this region is not well defined because there has been little oil and gas exploration and no commercial production. Consequently, an infrastructure feasibility design was completed for a hub-scale offshore CO2 storage system along the Northeast U.S. Atlantic. The design included development of a detailed, site-specific geological model for a location near the Great Stone Dome geological structure in the Baltimore Canyon Trough off the coast of Delaware, Maryland, and New Jersey. A field injection system topology design was completed to portray a design with eight wells in two clusters connected by central manifolds. Reservoir simulations were completed for the injection system that showed the hub may be able to inject 17 million metric tons (MMT) of CO2 per year for thirty years, but injection rates varied substantially across the eight wells. A CO2 pipeline design determined feasible routes from the east coast shoreline to the injection field. Finally, the CO2 injection system design included subsea injection trees, manifolds, and power umbilicals. This is the first study to define large-scale carbon storage design and infrastructure options for the offshore Atlantic, which can help to progress this region towards field characterization and early-mover deployment for future decarbonization in the region.
29 ENERGY PLANNING, POLICY, AND ECONOMY↗