ALBERT

Description: We report on the application of an off-the-shelf verification platform to the RC4 stream cipher cryptographic software implementation (as available in the openSSL library), and introduce a deductive verification technique based on self-composition for proving the absence of error propagation.

Description: The EU Mobius project has been concerned with the security of Java applications, and of mobile devices such as smart phones that execute such applications. In this talk, I'll give a brief overview of the results obtained on on-device checking of various security-related program properties. I'll then describe in more detail how the concept of certified abstract interpretation and abstraction-carrying code can be applied to polyhedral-based analysis of Java byte code in order to verify properties pertaining to the usage of resources of a down-loaded application. Particular emphasis has been on finding ways of reducing the size of the certificates that accompany a piece of code.

Description: In this paper, we propose a proof-carrying code framework for program-generators. The enabling technique is abstract parsing, a static string analysis technique, which is used as a component for generating and validating certificates. Our framework provides an efficient solution for certifying program-generators whose safety properties are expressed in terms of the grammar representing the generated program. The fixed-point solution of the analysis is generated and attached with the program-generator on the code producer side. The consumer receives the code with a fixed-point solution and validates that the received fixed point is indeed a fixed point of the received code. This validation can be done in a single pass.

Description: We outline some conceptual challenges in extending the PCC paradigm to a concurrent and distributed setting, and sketch a generalized notion of module correctness based on viewing communication contracts as economic games. The model supports compositional reasoning about modular systems and is meant to apply not only to certification of executable code, but also of organizational workflows.

Description: Formal methods can be applied to many of the development and verification activities required for civil avionics software. RTCA/DO-178B, Software Considerations in Airborne Systems and Equipment Certification, gives a brief description of using formal methods as an alternate method of compliance with the objectives of that standard. Despite this, the avionics industry at large has been hesitant to adopt formal methods, with few developers have actually used formal methods for certification credit. Why is this so, given the volume of evidence of the benefits of formal methods? This presentation will explore some of the challenges to using formal methods in a certification context and describe the effort by the Formal Methods Subgroup of RTCA SC-205/EUROCAE WG-71 to develop guidance to make the use of formal methods a recognized approach.

Description: The correctness of safety-critical embedded software is crucial, whereas non-functional properties like deadlock-freedom and real-time constraints are particularly important. The real-time calculus Timed Communicating Sequential Processes (CSP) is capable of expressing such properties and can therefore be used to verify embedded software. In this paper, we present our formalization of Timed CSP in the Isabelle/HOL theorem prover, which we have formulated as an operational coalgebraic semantics together with bisimulation equivalences and coalgebraic invariants. Furthermore, we apply these techniques in an abstract specification with real-time constraints, which is the basis for current work in which we verify the components of a simple real-time operating system deployed on a satellite.

Description: We present jFuzz, a automatic testing tool for Java programs. jFuzz is a concolic whitebox fuzzer, built on the NASA Java PathFinder, an explicit-state Java model checker, and a framework for developing reliability and analysis tools for Java. Starting from a seed input, jFuzz automatically and systematically generates inputs that exercise new program paths. jFuzz uses a combination of concrete and symbolic execution, and constraint solving. Time spent on solving constraints can be significant. We implemented several well-known optimizations and name-independent caching, which aggressively normalizes the constraints to reduce the number of calls to the constraint solver. We present preliminary results due to the optimizations, and demonstrate the effectiveness of jFuzz in creating good test inputs. The source code of jFuzz is available as part of the NASA Java PathFinder. jFuzz is intended to be a research testbed for investigating new testing and analysis techniques based on concrete and symbolic execution. The source code of jFuzz is available as part of the NASA Java PathFinder.

Description: Data mining is defined as the discovery of useful, possibly unexpected, patterns and relationships in data using statistical and non-statistical techniques in order to develop schemes for decision and policy making. Data mining can be used to discover the sources and causes of problems in complex systems. In addition, data mining can support simulation strategies by finding the different constants and parameters to be used in the development of simulation models. This paper introduces a framework for data mining and its application to complex problems. To further explain some of the concepts outlined in this paper, the potential application to the NASA Shuttle Reinforced Carbon-Carbon structures and genetic programming is used as an illustration.

Description: In order for ceramics to be fully utilized as components for high-temperature and structural applications, joining and integration methods are needed. Such methods will allow for the fabrication the complex shapes and also allow for insertion of the ceramic component into a system that may have different adjacent materials. Monolithic silicon carbide (SiC) is a ceramic material of focus due to its high temperature strength and stability. Titanium foils were used as an interlayer to form diffusion bonds between chemical vapor deposited (CVD) SiC ceramics with the aid of hot pressing. The influence of such variables as interlayer thickness and processing time were investigated to see which conditions contributed to bonds that were well adhered and crack free. Optical microscopy, scanning electron microscopy, and electron microprobe analysis were used to characterize the bonds and to identify the reaction formed phases.

Description: We present an approach to systematically derive safety cases for automatically generated code from information collected during a formal, Hoare-style safety certification of the code. This safety case makes explicit the formal and informal reasoning principles, and reveals the top-level assumptions and external dependencies that must be taken into account; however, the evidence still comes from the formal safety proofs. It uses a generic goal-based argument that is instantiated with respect to the certified safety property (i.e., safety claims) and the program. This will be combined with a complementary safety case that argues the safety of the framework itself, in particular the correctness of the Hoare rules with respect to the safety property and the trustworthiness of the certification system and its individual components. Keywords: Automated code generation, Hoare logic, formal code certification, safety case, Goal Structuring Notation.

Description: Impact tests were conducted on uncoated 2D and 2.5D MI SiC/SiC composite specimens at room temperature and 1316 C in air. The specimens were analyzed before and after impact using optical microscopy, pulsed thermography (PT) and computed tomography (CT). Preliminary results indicate the following. Both 2-D and 2.5D composites show increase in surface and volumetric damages with increasing impact velocity. However, 2-D composites are prone to delamination cracks. In both 2D and 2.5D composites, the magnitude of impact damage at a fixed impact velocity is slightly greater at room temperature than at 1315 C. At a fixed projectile velocity and test temperature, the depth of penetration of the projectile into the substrate is significantly lower in 2.5D composites than in 2D composites. Fiber architecture plays a significant role controlling impact damage in MI SiC/SiC composites.

Description: It is known that polymer films can degrade in space due to exposure to the environment, but the magnitude of the mechanical property degradation and the degree to which the different environmental factors play a role in it is not well understood. This paper describes the results of an experiment flown on the Materials International Space Station Experiment (MISSE) 5 to determine the change in tensile strength and % elongation of some typical polymer films exposed in a nadir facing environment on the International Space Station and where possible compare to similar ram and wake facing experiments flown on MISSE 1 to get a better indication of the role the different environments play in mechanical property change.

Description: Nano-fibers are used to reinforce polymer matrices to enhance the matrix dependent properties that are subsequently used in conventional structural composites. A quasi isotropic configuration is used in arranging like nano-fibers through the thickness to ascertain equiaxial enhanced matrix behavior. The nano-fiber volume ratios are used to obtain the enhanced matrix strength properties for 0.01,0.03, and 0.05 nano-fiber volume rates. These enhanced nano-fiber matrices are used with conventional fiber volume ratios of 0.3 and 0.5 to obtain the composite properties. Results show that nano-fiber enhanced matrices of higher than 0.3 nano-fiber volume ratio are degrading the composite properties.

Description: While the low thermal conductivities of silica aerogels have made them of interest to the aerospace community as lightweight thermal insulation, the application of conformal polymer coatings to these gels increases their strength significantly, making them potentially useful as structural materials as well. In this work we perform multiscale computer simulations to investigate the tensile and compressive strain behavior of silica and polymer-coated silica aerogels. Aerogels are made up of clusters of interconnected particles of amorphous silica of less than bulk density. We simulate gel nanostructure using a Diffusion Limited Cluster Aggregation (DLCA) procedure, which produces aggregates that exhibit fractal dimensions similar to those observed in real aerogels. We have previously found that model gels obtained via DLCA exhibited stress-strain curves characteristic of the experimentally observed brittle failure. However, the strain energetics near the expected point of failure were not consistent with such failure. This shortcoming may be due to the fact that the DLCA process produces model gels that are lacking in closed-loop substructures, compared with real gels. Our model gels therefore contain an excess of dangling strands, which tend to unravel under tensile strain, producing non-brittle failure. To address this problem, we have incorporated a modification to the DLCA algorithm that specifically produces closed loops in the model gels. We obtain the strain energetics of interparticle connections via atomistic molecular statics, and abstract the collective energy of the atomic bonds into a Morse potential scaled to describe gel particle interactions. Polymer coatings are similarly described. We apply repeated small uniaxial strains to DLCA clusters, and allow relaxation of the center eighty percent of the cluster between strains. The simulations produce energetics and stress-strain curves for looped and nonlooped clusters, for a variety of densities and interaction parameters.

Description: Phenolic Impregnated Carbon Ablator was the heatshield material for the Stardust probe and is also a candidate heatshield material for the Orion Crew Module. As part of the heatshield qualification for Orion, physical and thermal properties were measured for newly manufactured material, included emissivity, heat capacity, thermal conductivity, elemental composition, and thermal decomposition rates. Based on these properties, an ablation and thermal-response model was developed for temperatures up to 3500 K and pressures up to 100 kPa. The model includes orthotropic and pressure-dependent thermal conductivity. In this work, model validation is accomplished by comparison of predictions with data from many arcjet tests conducted over a range of stagnation heat flux and pressure from 107 Watts per square centimeter at 2.3 kPa to 1100 Watts per square centimeter at 84 kPa. Over the entire range of test conditions, model predictions compare well with measured recession, maximum surface temperatures, and in depth temperatures.

Description: Ceramic thermal and environmental barrier coatings (TEBC) for SiC-based ceramics will play an increasingly important role in future gas turbine engines because of their ability to effectively protect the engine components and further raise engine temperatures. However, the coating long-term durability remains a major concern with the ever-increasing temperature, strength and stability requirements in engine high heat-flux combustion environments, especially for highly-loaded rotating turbine components. Advanced TEBC systems, including nano-composite based HfO2-aluminosilicate and rare earth silicate coatings are being developed and tested for higher temperature capable SiC/SiC ceramic matrix composite (CMC) turbine blade applications. This paper will emphasize coating composite and multilayer design approach and the resulting performance and durability in simulated engine high heat-flux, high stress and high pressure combustion environments. The advances in the environmental barrier coating development showed promise for future rotating CMC blade applications.

Description: Ceramic matrix composites (CMC) are suitable for high temperature structural applications such as turbine airfoils and hypersonic thermal protection systems due to their low density high thermal conductivity. The employment of these materials in such applications is limited by the ability to accurately monitor and predict damage evolution. Current nondestructive methods such as ultrasound, x-ray, and thermal imaging are limited in their ability to quantify small scale, transverse, in-plane, matrix cracks developed over long-time creep and fatigue conditions. CMC is a multifunctional material in which the damage is coupled with the material s electrical resistance, providing the possibility of real-time information about the damage state through monitoring of resistance. Here, resistance measurement of SiC/SiC composites under mechanical load at both room temperature monotonic and high temperature creep conditions, coupled with a modal acoustic emission technique, can relate the effects of temperature, strain, matrix cracks, fiber breaks, and oxidation to the change in electrical resistance. A multiscale model can in turn be developed for life prediction of in-service composites, based on electrical resistance methods. Results of tensile mechanical testing of SiC/SiC composites at room and high temperatures will be discussed. Data relating electrical resistivity to composite constituent content, fiber architecture, temperature, matrix crack formation, and oxidation will be explained, along with progress in modeling such properties.

Description: Light-weight, creep-resistant silicon nitride ceramics possess excellent high-temperature strength and are projected to significantly raise engine efficiency and performance when used as turbine components in the next-generation turbo-shaft engines without the extensive cooling that is needed for metallic parts. One key aspect of Si3N4 utilization in such applications is its joining response to diverse materials. In an ongoing research program, the joining and integration of Si3N4 ceramics with metallic, ceramic, and composite materials using braze interlayers with the liquidus temperature in the range 750-1240C is being explored. In this paper, the self-joining behavior of Kyocera Si3N4 and St. Gobain Si3N4 using a ductile Cu-based active braze (Cu-ABA) containing Ti will be presented. Joint microstructure, composition, hardness, and strength as revealed by optical microscopy, scanning electron microscopy (SEM), energy dispersive spectroscopy (EDS), Knoop microhardness test, and offset compression shear test will be presented. Additionally, microstructure, composition, and joint strength of Si3N4/Inconel 625 joints made using Cu-ABA, will be presented. The results will be discussed with reference to the role of chemical reactions, wetting behavior, and residual stresses in joints.

Description: High-temperature piezoelectrics are a key technology for aeronautics and aerospace applications such as fuel modulation to increase the engine efficiency and decrease emissions. The principal challenge for the insertion of piezoelectric materials is the limitation on upper use temperature which is due to low Curie-Temperature (TC) and increasing electrical conductivity. BiScO3-PbTiO3 (BS-PT) system is a promising candidate for improving the operating temperature for piezoelectric actuators due to its high TC (greater than 400 C). Bi2O3 was shown to be a good sintering aid for liquid phase sintering resulting in reduced grain size and increased resistivity. Zr doped and liquid phase sintered BS-PT ceramics exhibited saturated and square hysteresis loops with enhanced remenant polarization (37 microC per square centimeter) and coercive field (14 kV/cm). BS-PT doped with Mn showed enhanced field induced strain (0.27% at 50kV/cm). All the numbers indicated in parenthesis were collected at 100 C.

Description: Robust multilayer insulation systems have long been a goal of many research projects. Such insulation systems must provide some degree of structural support and also mechanical integrity during loss of vacuum scenarios while continuing to provide insulative value to the vessel. Aerogel composite blankets can be the best insulation materials in ambient pressure environments; in high vacuum, the thermal performance of aerogel improves by about one order of magnitude. Standard multilayer insulation (MU) is typically 50% worse at ambient pressure and at soft vacuum, but as much as two or three orders of magnitude better at high vacuum. Different combinations of aerogel and multilayer insulation systems have been tested at Cryogenics Test Laboratory of NASA Kennedy Space Center. Analysis performed at Oak Ridge National Laboratory showed an importance to the relative location of the MU and aerogel blankets. Apparent thermal conductivity testing under cryogenic-vacuum conditions was performed to verify the analytical conclusion. Tests results are shown to be in agreement with the analysis which indicated that the best performance is obtained with aerogel layers located in the middle of the blanket insulation system.

Description: Aerogel blanket materials for use in thermal insulation systems are now commercially available and implemented by industry. Prototype aerogel blanket materials were presented at the Cryogenic Engineering Conference in 1997 and by 2004 had progressed to full commercial production by Aspen Aerogels. Today, this new technology material is providing superior energy efficiencies and enabling new design approaches for more cost effective cryogenic systems. Aerogel processing technology and methods are continuing to improve, offering a tailor-able array of product formulations for many different thermal and environmental requirements. Many different varieties and combinations of aerogel blankets have been characterized using insulation test cryostats at the Cryogenics Test Laboratory of NASA Kennedy Space Center. Detailed thermal conductivity data for a select group of materials are presented for engineering use. Heat transfer evaluations for the entire vacuum pressure range, including ambient conditions, are given. Examples of current cryogenic applications of aerogel blanket insulation are also given. KEYWORDS: Cryogenic tanks, thermal insulation, composite materials, aerogel, thermal conductivity, liquid nitrogen boil-off

Description: RTM Resins based on a-ODPA and a-BPDA with kinked diamines exhibit low-melt viscosity (approximately 10 poise). Composites made from a-ODPA resins (T(sub g) = 265-330 C) by RTM display good mechanical properties at 288 C (550 F), but soften at 315 C (600 F). Composites of RTM370 based on a-BPDA retain excellent mechanical properties at 315 C, exceeding BMI-5270-1 capability.

Description: Preferential oriented multiwalled carbon nanotubes were prepared by the injection chemical vapor deposition (CVD) method using either cyclopentadienyliron dicarbonyl dimer or cyclooctatetraene iron tricarbonyl as the iron catalyst source. The catalyst precursors were dissolved in toluene as the carrier solvent for the injections. The concentration of the catalyst was found to influence both the growth (i.e., MWNT orientation) of the nanotubes, as well as the amount of iron in the deposited material. As deposited, the multiwalled carbon nanotubes contained as little as 2.8% iron by weight. The material was deposited onto tantalum foil and fused silica substrates. The nanotubes were characterized by scanning electron microscopy, transmission electron microscopy, Raman spectroscopy and thermogravimetric analysis. This synthetic route provides a simple and scalable method to deposit MWNTs with a low defect density, low metal content and a preferred orientation. Subsequently, a small start-up was founded to commercialize the deposition equipment. The contrast between the research and entrepreneurial environments will be discussed.

Description: Dynamic array bound checks are crucial elements for the security of a Java Virtual Machines. These dynamic checks are however expensive and several static analysis techniques have been proposed to eliminate explicit bounds checks. Such analyses require advanced numerical and symbolic manipulations that 1) penalize bytecode loading or dynamic compilation, 2) complexify the trusted computing base. Following the Foundational Proof Carrying Code methodology, our goal is to provide a lightweight bytecode verifier for eliminating array bound checks that is both efficient and trustable. In this work, we define a generic relational program analysis for an imperative, stackoriented byte code language with procedures, arrays and global variables and instantiate it with a relational abstract domain as polyhedra. The analysis has automatic inference of loop invariants and method pre-/post-conditions, and efficient checking of analysis results by a simple checker. Invariants, which can be large, can be specialized for proving a safety policy using an automatic pruning technique which reduces their size. The result of the analysis can be checked efficiently by annotating the program with parts of the invariant together with certificates of polyhedral inclusions. The resulting checker is sufficiently simple to be entirely certified within the Coq proof assistant for a simple fragment of the Java bytecode language. During the talk, we will also report on our ongoing effort to scale this approach for the full sequential JVM.

Description: In the late 1990s, proof-carrying code was able to produce machine-checkable safety proofs for machine-language programs even though (1) it was impractical to prove correctness properties of source programs and (2) it was impractical to prove correctness of compilers. But now it is practical to prove some correctness properties of source programs, and it is practical to prove correctness of optimizing compilers. We can produce more expressive proof-carrying code, that can guarantee correctness properties for machine code and not just safety. We will construct program logics for source languages, prove them sound w.r.t. the operational semantics of the input language for a proved-correct compiler, and then use these logics as a basis for proving the soundness of static analyses.

Description: As Earth science applications grow increasingly complex over time, maintenance of such software becomes a significant challenge. In general, the software subsystems were designed, implemented and integrated (over an extended period of time) by different groups that did not follow the same software design standard. The objective was understandably to obtain scientific results quickly, but this goal was often achieved at the expense of good software practices. With that pattern of development, the cost of incremental changes to the applications grow ominously large. This increase in effort, tends to squeeze development resources and largely prevent any systematic attempt to reintroduce better software practices and thereby enhance the maintainability of the software. In this paper, we present the process we used to incrementally refactor and componentize the Global Modeling Initiative code to make it more understandable, maintainable, flexible and extensible. The resulting product not only preserves the scientific integrity of the original code but also extends the capabilities of the code for several applications.

Description: The AIRS Science Team Version 5 retrieval algorithm has been finalized and is now operational at the Goddard DAAC in the processing (and reprocessing) of all AIRS data. The AIRS Science Team Version 5 retrieval algorithm contains a number of significant improvements over Version 4. Two very significant improvements are described briefly below. 1) The AIRS Science Team Radiative Transfer Algorithm (RTA) has now been upgraded to accurately account for effects of non-local thermodynamic equilibrium on the AIRS observations. This allows for use of AIRS observations in the entire 4.3 micron CO2 absorption band in the retrieval algorithm during both day and night. Following theoretical considerations, tropospheric temperature profile information is obtained almost exclusively from clear column radiances in the 4.3 micron CO2 band in the AIRS Version 5 temperature profile retrieval step. These clear column radiances are a derived product that are indicative of radiances AIRS channels would have seen if the field of view were completely clear. Clear column radiances for all channels are determined using tropospheric sounding 15 micron CO2 observations. This approach allows for the generation of accurate values of clear column radiances and T(p) under most cloud conditions. 2) Another very significant improvement in Version 5 is the ability to generate accurate case-by-case, level-by-level error estimates for the atmospheric temperature profile, as well as for channel-by-channel clear column radiances. These error estimates are used for quality control of the retrieved products. Based on error estimate thresholds, each temperature profiles is assigned a characteristic pressure, pg, down to which the profile is characterized as good for use for data assimilation purposes. We have conducted forecast impact experiments assimilating AIRS quality controlled temperature profiles using the NASA GEOS-5 data assimilation system, consisting of the NCEP GSI analysis coupled with the NASA FVGCM, at a spatial resolution of 0.5 deg by 0.5 deg. Assimilation of Quality Controlled AIRS temperature profiles down to pg resulted in significantly improved forecast skill compared to that obtained from experiments when all data used operationally by NCEP, except for AIRS data, is assimilated. These forecasts were also significantly better than to those obtained when AIRS radiances (rather than temperature profiles) are assimilated, which is the way AIRS data is used operationally by NCEP and ECMWF.

Description: During International Space Station campout protocol ExtraVehicular Activity (EVA) preparations, the crew is isolated overnight in the small airlock volume in a reduced pressure, oxygen enriched atmosphere. As such, there are special considerations for the software in terms of air composition, pressure control and emergency responses. For one, the ISS software must monitor and manage two distinct atmospheres. Also, the small airlock volume is especially sensitive to small changes in the environment, and what would be a minor emergency in the larger vehicle volume can have catastrophic results in the isolated airlock. Finally, in cases of emergency, the crew needs to rapidly egress the airlock, which requires an aggressive automatic repressurization to equalize pressure on the hatch. This paper will describe the software which is modified for the airlock campout protocol. In addition, the paper will describe the software problems and hardware problems with software workarounds which have affected campout protocol.

Description: Methods and apparatus to encode message input symbols in accordance with an accumulate-repeat-accumulate code with repetition three or four are disclosed. Block circulant matrices are used. A first method and apparatus make use of the block-circulant structure of the parity check matrix. A second method and apparatus use block-circulant generator matrices.

Description: Described is a device having an anti-reflection surface. The device comprises a silicon substrate with a plurality of silicon spikes formed on the substrate. A first metallic layer is formed on the silicon spikes to form the anti-reflection surface. The device further includes an aperture that extends through the substrate. A second metallic layer is formed on the substrate. The second metallic layer includes a hole that is aligned with the aperture. A spacer is attached with the silicon substrate to provide a gap between an attached sensor apparatus. Therefore, operating as a Micro-sun sensor, light entering the hole passes through the aperture to be sensed by the sensor apparatus. Additionally, light reflected by the sensor apparatus toward the first side of the silicon substrate is absorbed by the first metallic layer and silicon spikes and is thereby prevented from being reflected back toward the sensor apparatus.

Description: This Technical Memorandum examines the effects of heat and absorbed moisture on the open hole compression strength of carbon/epoxy laminates with the material and layup intended for the Ares I composite interstage. The knockdown due to temperature, amount of moisture absorbed, and the interaction between these two are examined. Results show that temperature is much more critical than the amount of moisture absorbed. The environmental knockdown factor was found to be low for this material and layup and thus obtaining a statistically significant number for this value needs to be weighed against a program s cost and schedule since basis values, damage tolerance, and safety factors all contribute much more to the overall knockdown factor.

Description: Self-healing cable apparatus and methods disclosed. The self-healing cable has a central core surrounded by an adaptive cover that can extend over the entire length of the self-healing cable or just one or more portions of the self-healing cable. The adaptive cover includes an axially and/or radially compressible-expandable (C/E) foam layer that maintains its properties over a wide range of environmental conditions. A tape layer surrounds the C/E layer and is applied so that it surrounds and axially and/or radially compresses the C/E layer. When the self-healing cable is subjected to a damaging force that causes a breach in the outer jacket and the tape layer, the corresponding localized axially and/or radially compressed portion of the C/E foam layer expands into the breach to form a corresponding localized self-healed region. The self-healing cable is manufacturable with present-day commercial self-healing cable manufacturing tools.

Description: An ion flux is directed to a carbon nanotube to permanently shape, straighten and/or bend the carbon nanotube into a desired configuration. Such carbon nanotubes have many properties that make them ideal as probes for Scanning Probe Microscopy and many other applications.

Description: SiC stability and recession rates were modeled in hydrogen/oxygen combustion environments for the Integrated High Payoff Rocket Propulsion Technology (IHPRPT) program. The IHPRPT program is a government and industry program to improve U.S. rocket propulsion systems. Within this program SiC-based ceramic matrix composites are being considered for transpiration cooled injector faceplates or rocket engine thrust chamber liners. Material testing under conditions representative of these environments was conducted at the NASA Glenn Research Center, Cell 22. For the study described herein, SiC degradation was modeled under these Cell 22 test conditions for comparison to actual test results: molar mixture ratio, MR (O2:H2) = 6, material temperatures to 1700 C, combustion gas pressures between 0.34 and 2.10 atm, and gas velocities between 8,000 and 12,000 fps. Recession was calculated assuming rates were controlled by volatility of thermally grown silica limited by gas boundary layer transport. Assumptions for use of this model were explored, including the presence of silica on the SiC surface, laminar gas boundary layer limited volatility, and accuracy of thermochemical data for volatile Si-O-H species. Recession rates were calculated as a function of temperature. It was found that at 1700 C, the highest temperature considered, the calculated recession rates were negligible, about 200 m/h, relative to the expected lifetime of the material. Results compared favorably to testing observations. Other mechanisms contributing to SiC recession are briefly described including consumption of underlying carbon and pitting. A simple expression for liquid flow on the material surface was developed from a one-dimensional treatment of the Navier-Stokes Equation. This relationship is useful to determine under which conditions glassy coatings or thermally grown silica would flow on the material surface, removing protective layers by shear forces. The velocity of liquid flow was found to depend on the gas velocity, the viscosity of gas and liquid, as well as the thickness of the gas boundary layer and the liquid layer. Calculated flow rates of a borosilicate glass coating compared well to flow rates observed for this coating tested on a SiC panel in Cell 22.

Description: Software Quality Assurance (SQA) is an important component of the software development process. SQA processes provide assurance that the software products and processes in the project life cycle conform to their specified requirements by planning, enacting, and performing a set of activities to provide adequate confidence that quality is being built into the software. Typical techniques include: (1) Testing (2) Simulation (3) Model checking (4) Symbolic execution (5) Management reviews (6) Technical reviews (7) Inspections (8) Walk-throughs (9) Audits (10) Analysis (complexity analysis, control flow analysis, algorithmic analysis) (11) Formal method Our work over the last few years has resulted in substantial knowledge about SQA techniques, especially the areas of technical reviews and inspections. But can we apply the same QA techniques to the system development process? If yes, what kind of tailoring do we need before applying them in the system engineering context? If not, what types of QA techniques are actually used at system level? And, is there any room for improvement.) After a brief examination of the system engineering literature (especially focused on NASA and DoD guidance) we found that: (1) System and software development process interact with each other at different phases through development life cycle (2) Reviews are emphasized in both system and software development. (Figl.3). For some reviews (e.g. SRR, PDR, CDR), there are both system versions and software versions. (3) Analysis techniques are emphasized (e.g. Fault Tree Analysis, Preliminary Hazard Analysis) and some details are given about how to apply them. (4) Reviews are expected to use the outputs of the analysis techniques. In other words, these particular analyses are usually conducted in preparation for (before) reviews. The goal of our work is to explore the interaction between the Quality Assurance (QA) techniques at the system level and the software level.

Description: The presence of a honeycomb core in a multi-wall shielding configuration for protection against micrometeoroid and orbital debris (MMOD) particle impacts at hypervelocity is generally considered to be detrimental as the cell walls act to restrict fragment cloud expansion, creating a more concentrated load on the shield rear wall. However, mission requirements often prevent the inclusion of a dedicated MMOD shield, and as such, structural honeycomb sandwich panels are amongst the most prevalent shield types. Open cell metallic foams are a relatively new material with novel mechanical and thermal properties that have shown promising results in preliminary hypervelocity impact shielding evaluations. In this study, an ISS-representative MMOD shielding configuration has been modified to evaluate the potential performance enhancement gained through the substitution of honeycomb for open cell foam. The baseline shielding configuration consists of a double mesh outer layer, two honeycomb sandwich panels, and an aluminum rear wall. In the modified configuration the two honeycomb cores are replaced by open-cell foam. To compensate for the heavier core material, facesheets have been removed from the second sandwich panel in the modified configuration. A total of 19 tests on the double layer honeycomb and double layer foam configurations are reported. For comparable mechanical and thermal performance, the foam modifications were shown to provide a 15% improvement in critical projectile diameter at low velocities (i.e. 3 km/s) and a 3% increase at high velocities (i.e. 7 km/s) for normal impact. With increasing obliquity, the performance enhancement was predicted to increase, up to a 29% improvement at 60 (low velocity). Ballistic limit equations have been developed for the new configuration, and consider the mass of each individual shield component in order to maintain validity in the event of minor configuration modifications. Previously identified weaknesses of open cell foams for hypervelocity impact shielding such as large projectile diameters, low velocities, and high degrees of impact obliquity have all been investigated, and found to be negligible for the double-layer configuration.

Description: In accordance with an embodiment of the invention, an article is disclosed. The article comprises a gas turbine engine component substrate comprising a silicon material; and an environmental barrier coating overlying the substrate, wherein the environmental barrier coating comprises cerium oxide, and the cerium oxide reduces formation of silicate glass on the substrate upon exposure to corrodant sulfates.

Description: Thick film magnetic/insulating nanocomposite materials, with significantly reduced core loss, and their manufacture are described. The insulator coated magnetic nanocomposite comprises one or more magnetic components, and an insulating component. The magnetic component comprises nanometer scale particles (about 1 to about 100 nanometers) coated by a thin-layered insulating phase. While the intergrain interaction between the immediate neighboring magnetic nanoparticles separated by the insulating phase provides the desired soft magnetic properties, the insulating material provides high resistivity, which reduces eddy current loss.

Description: A precursor of a ceramic adhesive suitable for use in a vacuum, thermal, and microgravity environment. The precursor of the ceramic adhesive includes a silicon-based, preceramic polymer and at least one ceramic powder selected from the group consisting of aluminum oxide, aluminum nitride, boron carbide, boron oxide, boron nitride, hafnium boride, hafnium carbide, hafnium oxide, lithium aluminate, molybdenum silicide, niobium carbide, niobium nitride, silicon boride, silicon carbide, silicon oxide, silicon nitride, tin oxide, tantalum boride, tantalum carbide, tantalum oxide, tantalum nitride, titanium boride, titanium carbide, titanium oxide, titanium nitride, yttrium oxide, zirconium diboride, zirconium carbide, zirconium oxide, and zirconium silicate. Methods of forming the ceramic adhesive and of repairing a substrate in a vacuum and microgravity environment are also disclosed, as is a substrate repaired with the ceramic adhesive.

Description: Damage tolerance consists of analysis and experimentation working together. Impact damage is usually of most concern for laminated composites. Once impacted, the residual compression strength is usually of most interest. Other properties may be of more interest than compression (application dependent). A damage tolerance program is application specific (not everyone is building aircraft). The "Building Block Approach" is suggested for damage tolerance. Advantage can be taken of the excellent fatigue resistance of damaged laminates to save time and costs.

Description: Following the tragedy of the Orbiter Columbia (STS-107) on February 1, 2003, a major effort commenced to develop a better understanding of debris impacts and their effect on the space shuttle subsystems. An initiative to develop and validate physics-based computer models to predict damage from such impacts was a fundamental component of this effort. To develop the models it was necessary to physically characterize reinforced carbon-carbon (RCC) along with ice and foam debris materials, which could shed on ascent and impact the orbiter RCC leading edges. The validated models enabled the launch system community to use the impact analysis software LS-DYNA (Livermore Software Technology Corp.) to predict damage by potential and actual impact events on the orbiter leading edge and nose cap thermal protection systems. Validation of the material models was done through a three-level approach: Level 1--fundamental tests to obtain independent static and dynamic constitutive model properties of materials of interest, Level 2--subcomponent impact tests to provide highly controlled impact test data for the correlation and validation of the models, and Level 3--full-scale orbiter leading-edge impact tests to establish the final level of confidence for the analysis methodology. This report discusses the Level 2 test program conducted in the NASA Glenn Research Center (GRC) Ballistic Impact Laboratory with ice projectile impact tests on flat RCC panels, and presents the data observed. The Level 2 testing consisted of 54 impact tests in the NASA GRC Ballistic Impact Laboratory on 6- by 6-in. and 6- by 12-in. flat plates of RCC and evaluated three types of debris projectiles: Single-crystal, polycrystal, and "soft" ice. These impact tests helped determine the level of damage generated in the RCC flat plates by each projectile and validated the use of the ice and RCC models for use in LS-DYNA.

Description: This project is a subtask of a multi-center project to advance the state-of-the-art by developing NDE techniques that are capable of evaluating stress rupture (SR) degradation in Kevlar/epoxy (K/Ep) composite overwrapped pressure vessels (COPVs), and damage progression in carbon/epoxy (C/Ep) COPVs. In this subtask, acoustic emission (AE) data acquired during intermittent load hold tensile testing of K/Ep and C/Ep composite tow materials-of-construction used in COPV fabrication were analyzed to monitor progressive damage during the approach to tensile failure. Insight into the progressive damage of composite tow was gained by monitoring AE event rate, energy, source location, and frequency. Source location based on arrival time data was used to discern between significant AE attributable to microstructural damage and spurious AE attributable to background and grip noise. One of the significant findings was the observation of increasing violation of the Kaiser effect (Felicity ratio 〈 1.0) with damage accumulation.

Description: SAPE is a Python-based multidisciplinary analysis tool for systems analysis of planetary entry, descent, and landing (EDL) for Venus, Earth, Mars, Jupiter, Saturn, Uranus, Neptune, and Titan. The purpose of SAPE is to provide a variable-fidelity capability for conceptual and preliminary analysis within the same framework. SAPE includes the following analysis modules: geometry, trajectory, aerodynamics, aerothermal, thermal protection system, and structural sizing. SAPE uses the Python language-a platform-independent open-source software for integration and for the user interface. The development has relied heavily on the object-oriented programming capabilities that are available in Python. Modules are provided to interface with commercial and government off-the-shelf software components (e.g., thermal protection systems and finite-element analysis). SAPE runs on Microsoft Windows and Apple Mac OS X and has been partially tested on Linux.

Description: Software inspections provide a proven approach to quality assurance for software products of all kinds, including requirements, design, code, test plans, among others. Common to all inspections is the aim of finding and fixing defects as early as possible, and thereby providing cost savings by minimizing the amount of rework necessary later in the lifecycle. Measurement data, such as the number and type of found defects and the effort spent by the inspection team, provide not only direct feedback about the software product to the project team but are also valuable for process improvement activities. In this paper, we discuss NASA's use of software inspections and the rich set of data that has resulted. In particular, we present results from analysis of inspection data that illustrate the benefits of fully utilizing that data for process improvement at several levels. Examining such data across multiple inspections or projects allows team members to monitor and trigger cross project improvements. Such improvements may focus on the software development processes of the whole organization as well as improvements to the applied inspection process itself.

Description: Declarative specifications of digital systems often contain parts that can be automatically translated into executable code. Automated code generation may reduce or eliminate the kinds of errors typically introduced through manual code writing. For this approach to be effective, the generated code should be reasonably efficient and, more importantly, verifiable. This paper presents a prototype code generator for the Prototype Verification System (PVS) that translates a subset of PVS functional specifications into an intermediate language and subsequently to multiple target programming languages. Several case studies are presented to illustrate the tool's functionality. The generated code can be analyzed by software verification tools such as verification condition generators, static analyzers, and software model-checkers to increase the confidence that the generated code is correct.

Description: A theoretical investigation of the factors controlling the stress rupture life of the National Aeronautics and Space Administration's (NASA) composite overwrapped pressure vessels (COPVs) continues. Kevlar (DuPont) fiber overwrapped tanks are of particular concern due to their long usage and the poorly understood stress rupture process in Kevlar filaments. Existing long term data show that the rupture process is a function of stress, temperature and time. However due to the presence of a load sharing liner, the manufacturing induced residual stresses and the complex mechanical response, the state of actual fiber stress in flight hardware and test articles is not clearly known. This paper is a companion to a previously reported experimental investigation and develops a theoretical framework necessary to design full-scale pathfinder experiments and accurately interpret the experimentally observed deformation and failure mechanisms leading up to static burst in COPVs. The fundamental mechanical response of COPVs is described using linear elasticity and thin shell theory and discussed in comparison to existing experimental observations. These comparisons reveal discrepancies between physical data and the current analytical results and suggest that the vessel s residual stress state and the spatial stress distribution as a function of pressure may be completely different from predictions based upon existing linear elastic analyses. The 3D elasticity of transversely isotropic spherical shells demonstrates that an overly compliant transverse stiffness relative to membrane stiffness can account for some of this by shifting a thin shell problem well into the realm of thick shell response. The use of calibration procedures are demonstrated as calibrated thin shell model results and finite element results are shown to be in good agreement with the experimental results. The successes reported here have lead to continuing work with full scale testing of larger NASA COPV hardware.

Description: The J-2X Engine (built by Pratt & Whitney Rocketdyne,) in the Upper Stage of the Ares I Crew Launch Vehicle, will only start within a certain range of temperature and pressure for Liquid Hydrogen and Liquid Oxygen propellants. The purpose of the Simulink Integrated Performance Analysis Model is to verify that in all reasonable conditions the temperature and pressure of the propellants are within the required J-2X engine start boxes. In order to run the simulation, test variables must be entered at all reasonable values of parameters such as heat leak and mass flow rate. To make this testing process as efficient as possible in order to save the maximum amount of time and money, and to show that the J-2X engine will start when it is required to do so, a graphical user interface (GUI) was created to allow the input of values to be used as parameters in the Simulink Model, without opening or altering the contents of the model. The GUI must allow for test data to come from Microsoft Excel files, allow those values to be edited before testing, place those values into the Simulink Model, and get the output from the Simulink Model. The GUI was built using MATLAB, and will run the Simulink simulation when the Simulate option is activated. After running the simulation, the GUI will construct a new Microsoft Excel file, as well as a MATLAB matrix file, using the output values for each test of the simulation so that they may graphed and compared to other values.

Description: The NASA Engineering and Safety Center (NESC) has been conducting an independent technical assessment to address safety concerns related to the known stress rupture failure mode of filament wound pressure vessels in use on Shuttle and the International Space Station. The Shuttle s Kevlar-49 (DuPont) fiber overwrapped tanks are of particular concern due to their long usage and the poorly understood stress rupture process in Kevlar-49 filaments. Existing long term data show that the rupture process is a function of stress, temperature and time. However due to the presence of load sharing liners and the complex manufacturing procedures, the state of actual fiber stress in flight hardware and test articles is not clearly known. Indeed nonconservative life predictions have been made where stress rupture data and lifing procedures have ignored the contribution of the liner in favor of applied pressure as the controlling load parameter. With the aid of analytical and finite element results, this paper examines the fundamental mechanical response of composite overwrapped pressure vessels including the influence of elastic plastic liners and degraded/creeping overwrap properties. Graphical methods are presented describing the non-linear relationship of applied pressure to Kevlar-49 fiber stress/strain during manufacturing, operations and burst loadings. These are applied to experimental measurements made on a variety of vessel systems to demonstrate the correct calibration of fiber stress as a function of pressure. Applying this analysis to the actual qualification burst data for Shuttle flight hardware revealed that the nominal fiber stress at burst was in some cases 23 percent lower than what had previously been used to predict stress rupture life. These results motivate a detailed discussion of the appropriate stress rupture lifing philosophy for COPVs including the correct transference of stress rupture life data between dissimilar vessels and test articles.

Description: Using a commercial software CD and minimal up-mass, SNFM monitors the Payload local area network (LAN) to analyze and troubleshoot LAN data traffic. Validating LAN traffic models may allow for faster and more reliable computer networks to sustain systems and science on future space missions. Research Summary: This experiment studies the function of the computer network onboard the ISS. On-orbit packet statistics are captured and used to validate ground based medium rate data link models and enhance the way that the local area network (LAN) is monitored. This information will allow monitoring and improvement in the data transfer capabilities of on-orbit computer networks. The Serial Network Flow Monitor (SNFM) experiment attempts to characterize the network equivalent of traffic jams on board ISS. The SNFM team is able to specifically target historical problem areas including the SAMS (Space Acceleration Measurement System) communication issues, data transmissions from the ISS to the ground teams, and multiple users on the network at the same time. By looking at how various users interact with each other on the network, conflicts can be identified and work can begin on solutions. SNFM is comprised of a commercial off the shelf software package that monitors packet traffic through the payload Ethernet LANs (local area networks) on board ISS.

Description: The purpose of this project was to create Human-System Integration (HSI) scorecard software, which could be utilized to validate that human factors have been considered early in hardware/system specifications and design. The HSI scorecard is partially based upon the revised Human Rating Requirements (HRR) intended for NASA's Constellation program. This software scorecard will allow for quick appraisal of HSI factors, by using visual aids to highlight low and rapidly changing scores. This project consisted of creating a user-friendly Visual Basic program that could be easily distributed and updated, to and by fellow colleagues. Updating the Microsoft Word version of the HSI scorecard to a computer application will allow for the addition of useful features, improved easy of use, and decreased completion time for user. One significant addition is the ability to create Microsoft Excel graphs automatically from scorecard data, to allow for clear presentation of problematic areas. The purpose of this paper is to describe the rational and benefits of creating the HSI scorecard software, the problems and goals of project, and future work that could be done.

Description: A computer program has been developed to provide a common interface for all space mission data, and allows different types of data to be displayed in the same context. This software provides an infrastructure for representing any type of mission data.

Description: A document discusses self-deployable, rigidized structures that are ultra-lightweight and have gas barrier properties, space durability, and high impact resistance. Developed here are microcellular-foamed sandwich structures made from nanocomposite shape memory polymers (SMPs) with Cold-Hibernated Elastic Memory (CHEM) deployed technique for space structural components including space habitats. This type of foam sandwich also does not suffer from the toxicity problems of conventional foams, and has higher mechanical properties than those processed with conventional techniques. This design can be compacted into a very small volume for launch. Once deployed, the microcellular structure can use the heat from the Sun to recover 98 to 100 percent of its shape.

Description: Triaxial braid composite materials are beginning to be used in fan cases for commercial gas turbine engines. The primary benefit for the use of composite materials is reduced weight and the associated reduction in fuel consumption. However, there are also cost benefits in some applications. This paper presents a description of the braided composite materials and discusses aspects of the braiding process that can be utilized for efficient fabrication of composite cases. The paper also presents an approach that was developed for evaluating the braided composite materials and composite fan cases in a ballistic impact laboratory. Impact of composite panels with a soft projectile is used for materials evaluation. Impact of composite fan cases with fan blades or blade-like projectiles is used to evaluate containment capability. A post-impact structural load test is used to evaluate the capability of the impacted fan case to survive dynamic loads during engine spool down. Validation of these new test methods is demonstrated by comparison with results of engine blade-out tests.

Description: Many epoxy systems under consideration for composite pressure vessels are composed of toughened epoxy resins. In this work, epoxy blends containing both rigid aromatic and flexible aliphatic components were prepared, to model toughened systems, and determine the optimum route of silicate addition. Compositions were chosen such that both glassy and rubbery resins were obtained at room temperature. The physical properties of the nanocomposites varied with T(g) and silicate placement, however, nanocomposite T(g)s were observed which exceeded that of the base resin by greater than 10 C. The tensile strength of the glassy resin remained constant or decreased on the dispersion of clay while that of the rubbery material doubled. Selectively placing the clay in the aliphatic component of the rubbery blend resulted in a greater than 100% increase in material toughness.

Description: An universal and programmable logic gate based on G.sup.4-FET technology is disclosed, leading to the design of more efficient logic circuits. A new full adder design based on the G.sup.4-FET is also presented. The G.sup.4-FET can also function as a unique router device offering coplanar crossing of signal paths that are isolated and perpendicular to one another. This has the potential of overcoming major limitations in VLSI design where complex interconnection schemes have become increasingly problematic.

Description: Acoustic emission (AE) data acquired during intermittent load hold tensile testing of epoxy impregnated Kevlar(Registeres TradeMark) 49 (K/Ep) composite strands were analyzed to monitor progressive damage during the approach to tensile failure. Insight into the progressive damage of K/Ep strands was gained by monitoring AE event rate and energy. Source location based on energy attenuation and arrival time data was used to discern between significant AE attributable to microstructural damage and spurious AE attributable to noise. One of the significant findings was the observation of increasing violation of the Kaiser effect (Felicity ratio 〈 1.0) with damage accumulation. The efficacy of three different intermittent load hold stress schedules that allowed the Felicity ratio to be determined analytically is discussed.

Description: Certifying compilers generate proofs for low-level code that guarantee safety properties of the code. Type information is an essential part of safety proofs. But the size of type information remains a concern for certifying compilers in practice. This paper demonstrates type representation techniques in a large-scale compiler that achieves both concise type information and efficient type checking. In our 200,000-line certifying compiler, the size of type information is about 36% of the size of pure code and data for our benchmarks, the best result to the best of our knowledge. The type checking time is about 2% of the compilation time.

Description: An electroactive sensing or actuating material comprises a composite made from a polymer with polarizable moieties and an effective amount of carbon nanotubes incorporated in the polymer for a predetermined electromechanical operation of the composite when such composite is affected by an external stimulus. In another embodiment, the composite comprises a, third component of micro -sized to nano-sized particles of an electroactive ceramic that is also incorporated in the polymer matrix. The method for making the three-phase composite comprises either incorporating the carbon nanotubes in the polymer matrix before incorporation of the particles of ceramic or mixing the carbon nanotubes and particles of ceramic together in a solution before incorporation in the polymer matrix.

Description: Software programmer Jason Holmberg of Portland, Oregon, partnered with a Goddard Space Flight Center astrophysicist to develop a method for tracking the elusive whale shark using the unique spot patterns on the fish s skin. Employing a star-mapping algorithm originally designed for the Hubble Space Telescope, Holmberg created the Shepherd Project, a photograph database and pattern-matching system that can identify whale sharks by their spots and match images contributed to the database by photographers from around the world. The system has been adapted for tracking other rare and endangered animals, including polar bears and ocean sunfish.

Description: The present invention is directed to the effective dispersion of carbon nanotubes (CNTs) into polymer matrices. The nanocomposites are prepared using polymer matrices and exhibit a unique combination of properties, most notably, high retention of optical transparency in the visible range (i.e., 400-800 nm), electrical conductivity, and high thermal stability. By appropriate selection of the matrix resin, additional properties such as vacuum ultraviolet radiation resistance, atomic oxygen resistance, high glass transition (T(sub g)) temperatures, and excellent toughness can be attained. The resulting nanocomposites can be used to fabricate or formulate a variety of articles such as coatings on a variety of substrates, films, foams, fibers, threads, adhesives and fiber coated prepreg. The properties of the nanocomposites can be adjusted hy selection of the polymer matrix and CNT to fabricate articles that possess high optical transparency and antistatic behavior.

Description: The present invention is directed to the effective dispersion of carbon nanotubes (CNTs) into polymer matrices. The nanocomposites are prepared using polymer matrices and exhibit a unique combination of properties, most notably, high retention of optical transparency in the visible range (i.e., 400 800 nm), electrical conductivity, and high thermal stability. By appropriate selection of the matrix resin, additional properties such as vacuum ultraviolet radiation resistance, atomic oxygen resistance, high glass transition (T.sub.g) temperatures, and excellent toughness can be attained. The resulting nanocomposites can be used to fabricate or formulate a variety of articles such as coatings on a variety of substrates, films, foams, fibers, threads, adhesives and fiber coated prepreg. The properties of the nanocomposites can be adjusted by selection of the polymer matrix and CNT to fabricate articles that possess high optical transparency and antistatic behavior.

Description: A diagnosable structured logic array and associated process is provided. A base cell structure is provided comprising a logic unit comprising a plurality of input nodes, a plurality of selection nodes, and an output node, a plurality of switches coupled to the selection nodes, where the switches comprises a plurality of input lines, a selection line and an output line, a memory cell coupled to the output node, and a test address bus and a program control bus coupled to the plurality of input lines and the selection line of the plurality of switches. A state on each of the plurality of input nodes is verifiably loaded and read from the memory cell. A trusted memory block is provided. The associated process is provided for testing and verifying a plurality of truth table inputs of the logic unit.

Description: A method of fabricating a metal/composite hybrid laminate is provided. One or more layered arrangements are stacked on a solid base to form a layered structure. Each layered arrangement is defined by a fibrous material and a perforated metal sheet. A resin in its liquid state is introduced along a portion of the layered structure while a differential pressure is applied across the laminate structure until the resin permeates the fibrous material of each layered arrangement and fills perforations in each perforated metal sheet. The resin is cured thereby yielding a metal/composite hybrid laminate.

Description: Using a remarkable fabric originally developed to protect Apollo astronauts, Birdair Inc. of Amherst, New York, has crafted highly durable, safe, environmentally friendly, and architecturally stunning tensile membrane roofs for over 900 landmark structures around the world. Travelers in airports, sports fans at stadiums, and shoppers in malls have all experienced the benefits of the Teflon-coated fiberglass fabric that has enabled Birdair to grow from a small company established in its founder?s kitchen in 1955 to a multimillion-dollar specialty contractor today.

Description: An electroactive material comprises multiple layers of electroactive composite with each layer having unique dielectric, electrical and mechanical properties that define an electromechanical operation thereof when affected by an external stimulus. For example, each layer can be (i) a 2-phase composite made from a polymer with polarizable moieties and an effective amount of carbon nanotubes incorporated in the polymer for a predetermined electromechanical operation, or (ii) a 3-phase composite having the elements of the 2-phase composite and further including a third component of micro-sized to nano-sized particles of an electroactive ceramic incorporated in the polymer matrix.

Description: Method and system for functionalizing a collection of carbon nanotubes (CNTs). A selected precursor gas (e.g., H2 or F2 or CnHm) is irradiated to provide a cold plasma of selected target species particles, such as atomic H or F, in a first chamber. The target species particles are d irected toward an array of CNTs located in a second chamber while suppressing transport of ultraviolet radiation to the second chamber. A CNT array is functionalized with the target species particles, at or below room temperature, to a point of saturation, in an exposure time interval no longer than about 30 sec. *Discrimination against non-target species is provided by (i) use of a target species having a lifetime that is much greater than a lifetime of a non-target species and/or (2) use of an applied magnetic field to discriminate between charged particle trajectories for target species and for non-target species.

Description: A thin-film electrode for a bio-nanobattery is produced by consecutively depositing arrays of a ferritin protein on a substrate, employing a spin self-assembly procedure. By this procedure, a first ferritin layer is first formed on the substrate, followed by building a second, oppositely-charged ferritin layer on the top of the first ferritin layer to form a bilayer structure. Oppositely-charged ferritin layers are subsequently deposited on top of each other until a desired number of bilayer structures is produced. An ordered, uniform, stable and robust, thin-film electrode material of enhanced packing density is presented, which provides optimal charge density for the bio-nanobattery.

Description: This NASA conference publication contains the proceedings of the Third International Workshop on Proof-Carrying Code and Software Certification, held as part of LICS in Los Angeles, CA, USA, on August 15, 2009. Software certification demonstrates the reliability, safety, or security of software systems in such a way that it can be checked by an independent authority with minimal trust in the techniques and tools used in the certification process itself. It can build on existing validation and verification (V&V) techniques but introduces the notion of explicit software certificates, Vvilich contain all the information necessary for an independent assessment of the demonstrated properties. One such example is proof-carrying code (PCC) which is an important and distinctive approach to enhancing trust in programs. It provides a practical framework for independent assurance of program behavior; especially where source code is not available, or the code author and user are unknown to each other. The workshop wiII address theoretical foundations of logic-based software certification as well as practical examples and work on alternative application domains. Here "certificate" is construed broadly, to include not just mathematical derivations and proofs but also safety and assurance cases, or any fonnal evidence that supports the semantic analysis of programs: that is, evidence about an intrinsic property of code and its behaviour that can be independently checked by any user, intermediary, or third party. These guarantees mean that software certificates raise trust in the code itself, distinct from and complementary to any existing trust in the creator of the code, the process used to produce it, or its distributor. In addition to the contributed talks, the workshop featured two invited talks, by Kelly Hayhurst and Andrew Appel. The PCC 2009 website can be found at http://ti.arc.nasa.gov /event/pcc 091.

Description: It is known that software testers, more often than not, lack the time needed to fully test the delivered software product within the time period allotted to them. When problems in the implementation phase of a development project occur, it normally causes the software delivery date to slide. As a result, testers either need to work longer hours, or supplementary resources need to be added to the test team in order to meet aggressive test deadlines. One solution to this problem is to provide testers with a test automation framework to facilitate the development of automated test solutions.

Description: In this paper we will give a brief overview of how different missions implemented the fault protection application and the improvements along the way. We will then propose an architecture that supports the direct implementation of state-chart models into flight code. These state-chart models can be used to formally and naturally specify the behavior of all the major fault protection components - monitors, fault protection engine, and fault responses. The goal is a flexible, light-weight implementation of a traditional fault protection software system that is inexpensive to implement, reliable and understandable for both system and software developers.

Description: These software applications provide intuitive User Interfaces (UIs) with a consistent look and feel for interaction with, and control of, the Service Preparation Subsystem (SPS). The elements of the UIs described here are the File Manager, Mission Manager, and Log Monitor applications. All UIs provide access to add/delete/update data entities in a complex database schema without requiring technical expertise on the part of the end users. These applications allow for safe, validated, catalogued input of data. Also, the software has been designed in multiple, coherent layers to promote ease of code maintenance and reuse in addition to reducing testing and accelerating maturity.

Description: In this paper, we develop and formally verify practical algorithms for recovery from loss of separation. The formal verification is performed in the context of a criteria-based framework. This framework provides rigorous definitions of horizontal and vertical maneuver correctness that guarantee divergence and achieve horizontal and vertical separation. The algorithms are shown to be independently correct, that is, separation is achieved when only one aircraft maneuvers, and implicitly coordinated, that is, separation is also achieved when both aircraft maneuver. In this paper we improve the horizontal criteria over our previous work. An important benefit of the criteria approach is that different aircraft can execute different algorithms and implicit coordination will still be achieved, as long as they all meet the explicit criteria of the framework. Towards this end we have sought to make the criteria as general as possible. The framework presented in this paper has been formalized and mechanically verified in the Prototype Verification System (PVS).

Description: A software package that has been designed to allow authentication for determining if the rover(s) is/are within a set of boundaries or a specific area to access critical geospatial information by using GPS signal structures as a means to authenticate mobile devices into a network wirelessly and in real-time. The advantage lies in that the system only allows those with designated geospatial boundaries or areas into the server.

Description: MAGIC is a software tool capable of converting highly detailed 3D models from an open, standard format, VRML 2.0/97, into the proprietary DTS file format used by the Torque Game Engine from GarageGames. MAGIC is used to convert 3D simulations from authoritative sources into the data needed to run the simulations in NASA's Distributed Observer Network. The Distributed Observer Network (DON) is a simulation presentation tool built by NASA to facilitate the simulation sharing requirements of the Data Presentation and Visualization effort within the Constellation Program. DON is built on top of the Torque Game Engine (TGE) and has chosen TGE's Dynamix Three Space (DTS) file format to represent 3D objects within simulations.

Description: In this design, single-wall carbon nanotubes (SWNTs) have been coated in polymer molecules to create a new type of material that has low electrical conductivity, but still contains individual nanotubes, and small ropes of individual nanotubes, which are themselves good electrical conductors and serve as small conducting rods immersed in an electrically insulating matrix. The polymer is attached through weak chemical forces that are primarily non-covalent in nature, caused primarily through polarization rather than the sharing of valence electrons. Therefore, the electronic structure of the SWNT involved is substantially the same as that of free, individual (and small ropes of) SWNT. Their high conductivity makes the individual nanotubes extremely electrically polarizable, and materials containing these individual, highly polarizable molecules exhibit novel electrical properties including a high dielectric constant.

Description: Integrated multilayer insulation (IMLI) is being developed as an improved alternative to conventional multilayer insulation (MLI), which is more than 50 years old. A typical conventional MLI blanket comprises between 10 and 120 metallized polymer films separated by polyester nets. MLI is the best thermal- insulation material for use in a vacuum, and is the insulation material of choice for spacecraft and cryogenic systems. However, conventional MLI has several disadvantages: It is difficult or impossible to maintain the desired value of gap distance between the film layers (and consequently, it is difficult or impossible to ensure consistent performance), and fabrication and installation are labor-intensive and difficult. The development of IMLI is intended to overcome these disadvantages to some extent and to offer some additional advantages over conventional MLI. The main difference between IMLI and conventional MLI lies in the method of maintaining the gaps between the film layers. In IMLI, the film layers are separated by what its developers call a micro-molded discrete matrix, which can be loosely characterized as consisting of arrays of highly engineered, small, lightweight, polymer (typically, thermoplastic) frames attached to, and placed between, the film layers. The term "micro-molded" refers to both the smallness of the frames and the fact that they are fabricated in a process that forms precise small features, described below, that are essential to attainment of the desired properties. The term "discrete" refers to the nature of the matrix as consisting of separate frames, in contradistinction to a unitary frame spanning entire volume of an insulation blanket.

Description: An improved version of composite layer manufacturing (CLM) has been invented. CLM is a type of solid freeform fabrication (SFF) -- an automated process in which a three-dimensional object is built up, point-by-point, through extrusion of a matrix/fiber composite-material precursor. In CLM, the translation and the extrusion operation are such that the final size and shape of the fabricated object are as specified by a computer-aided design (CAD). Sometimes, in order to achieve the desired final shape,

Description: A material having useful thermoelectric properties was synthesized by combining indium-tin-oxide (ITO) with a NiCoCrAlY alloy/alumina cermet. This material had a very large Seebeck coefficient with electromotive-force-versustemperature behavior that is considered to be excellent with respect to utility in thermocouples and other thermoelectric devices. When deposited in thin-film form, ceramic thermocouples offer advantages over precious-metal (based, variously, on platinum or rhodium) thermocouples that are typically used in gas turbines. Ceramic thermocouples exhibit high melting temperatures, chemical stability at high temperatures, and little or no electromigration. Oxide ceramics also resist oxidation better than metal thermocouples, cost substantially less than precious-metal thermocouples, and, unlike precious-metal thermocouples, do not exert catalytic effects.

Description: A computer program calculates the two-dimensional trajectory (radial vs. axial position) of a finite-radius-of-curvature cutting tool on a lathe so as to cut a workpiece to a piecewise-continuous, analytically defined surface of revolution. (In the original intended application, the tool is a diamond cutter, and the workpiece is made of a crystalline material and is to be formed into an optical resonator disk.) The program also calculates an optimum cutting speed as F/L, where F is a material-dependent empirical factor and L is the effective instantaneous length of the cutting edge.

Description: A methodology for developing complex multifunctional materials that consist of or contain polymer/carbon-nanotube composites has been conceived. As used here, "multifunctional" signifies having additional and/or enhanced physical properties that polymers or polymer-matrix composites would not ordinarily be expected to have. Such properties include useful amounts of electrical conductivity, increased thermal conductivity, and/or increased strength. In the present methodology, these properties are imparted to a given composite through the choice and processing of its polymeric and CNT constituents.

Description: Current techniques for validating and verifying program changes often consider the entire program, even for small changes, leading to enormous V&V costs over a program s lifetime. This is due, in large part, to the use of syntactic program techniques which are necessarily imprecise. Building on recent advances in symbolic execution of heap manipulating programs, in this paper, we develop techniques for performing abstract semantic differencing of program behaviors that offer the potential for improved precision.

Description: The complexity of constraints is a major obstacle for constraint-based software verification. Automatic constraint solvers are fundamentally incomplete: input constraints often build on some undecidable theory or some theory the solver does not support. This paper proposes and evaluates several randomized solvers to address this issue. We compare the effectiveness of a symbolic solver (CVC3), a random solver, three hybrid solvers (i.e., mix of random and symbolic), and two heuristic search solvers. We evaluate the solvers on two benchmarks: one consisting of manually generated constraints and another generated with a concolic execution of 8 subjects. In addition to fully decidable constraints, the benchmarks include constraints with non-linear integer arithmetic, integer modulo and division, bitwise arithmetic, and floating-point arithmetic. As expected symbolic solving (in particular, CVC3) subsumes the other solvers for the concolic execution of subjects that only generate decidable constraints. For the remaining subjects the solvers are complementary.

Description: Moisture diffusion in multi-layer carbon composite structures is difficult to model using finite difference methods due to the discontinuity in concentrations between adjacent layers of differing materials. Applying a mass conserving approach at these boundaries proved to be effective at accurately predicting moisture uptake for a sample exposed to a fixed temperature and relative humidity. Details of the model developed are presented and compared with actual moisture uptake data gathered over 130 days from a graphite epoxy composite sandwich coupon with a Rohacell foam core.

Description: Proofs provide detailed justification for the validity of claims and are widely used in formal software development methods. However, they are often complex and difficult to understand, because they use machine-oriented formalisms; they may also be based on assumptions that are not justified. This causes concerns about the trustworthiness of using formal proofs as arguments in safety-critical applications. Here, we present an approach to develop safety cases that correspond to formal proofs found by automated theorem provers and reveal the underlying argumentation structure and top-level assumptions. We concentrate on natural deduction proofs and show how to construct the safety cases by covering the proof tree with corresponding safety case fragments.

Description: Carbon nanotube material having an outer diameter less than 10 nm and a number of walls less than ten are disclosed. Also disclosed are an electron field emission device including a substrate, an optionally layer of adhesion-promoting layer, and a layer of electron field emission material. The electron field emission material includes a carbon nanotube having a number of concentric graphene shells per tube of from two to ten, an outer diameter from 2 to 8 nm, and a nanotube length greater than 0.1 microns. One method to fabricate carbon nanotubes includes the steps of (a) producing a catalyst containing Fe and Mo supported on MgO powder, (b) using a mixture of hydrogen and carbon containing gas as precursors, and (c) heating the catalyst to a temperature above 950.degree. C. to produce a carbon nanotube. Another method of fabricating an electron field emission cathode includes the steps of (a) synthesizing electron field emission materials containing carbon nanotubes with a number of concentric graphene shells per tube from two to ten, an outer diameter of from 2 to 8 nm, and a length greater than 0.1 microns, (b) dispersing the electron field emission material in a suitable solvent, (c) depositing the electron field emission materials onto a substrate, and (d) annealing the substrate.

Description: The present invention provides a method of removing silicon nitride at about the same removal rate as silicon dioxide by CMP. The method utilizes a polishing slurry that includes colloidal silica abrasive particles dispersed in water and additives that modulate the silicon dioxide and silicon nitride removal rates such that they are about the same. In one embodiment of the invention, the additive is lysine or lysine mono hydrochloride in combination with picolinic acid, which is effective at a pH of about 8. In another embodiment of the invention, the additive is arginine in combination with picolinic acid, which is effective at a pH of about 10.

Description: Ensemble ReST is a software system that eases the development, deployment, and maintenance of server-side application programs to perform functions that would otherwise be performed by client software. Ensemble ReST takes advantage of the proven disciplines of ReST (Representational State Transfer. ReST leverages the standardized HTTP protocol to enable developers to offer services to a diverse variety of clients: from shell scripts to sophisticated Java application suites

Description: MONTE (Mission Operations and Navigation Toolkit Environment) Release 7.3 is an extensible software system designed to support trajectory and navigation analysis/design for space missions. MONTE is intended to replace the current navigation and trajectory analysis software systems, which, at the time of this reporting, are used by JPL's Navigation and Mission Design section. The software provides an integrated, simplified, and flexible system that can be easily maintained to serve the needs of future missions in need of navigation services.

Description: A computer program loads configuration code into a Xilinx field-programmable gate array (FPGA), reads back and verifies that code, reloads the code if an error is detected, and monitors the performance of the FPGA for errors in the presence of radiation. The program consists mainly of a set of VHDL files (wherein "VHDL" signifies "VHSIC Hardware Description Language" and "VHSIC" signifies "very-high-speed integrated circuit").

Description: The XVD [X-Windows VICAR (video image communication and retrieval) Display] computer program offers an interactive display of VICAR and PDS (planetary data systems) images. It is designed to efficiently display multiple-GB images and runs on Solaris, Linux, or Mac OS X systems using X-Windows.

Description: Carbon fiber composites utilizing flattened, large tow yarns in woven or braided forms are being used in many aerospace applications. Their complex fiber architecture and large unit cell size present challenges in both understanding deformation processes and measuring reliable material properties. This report examines composites made using flattened 12k and 24k standard modulus carbon fiber yarns in a 0 /+60 /-60 triaxial braid architecture. Standard straight-sided tensile coupons are tested with the 0 axial braid fibers either parallel with or perpendicular to the applied tensile load (axial or transverse tensile test, respectively). Nonuniform surface strain resulting from the triaxial braid architecture is examined using photogrammetry. Local regions of high strain concentration are examined to identify where failure initiates and to determine the local strain at the time of initiation. Splitting within fiber bundles is the first failure mode observed at low to intermediate strains. For axial tensile tests splitting is primarily in the 60 bias fibers, which were oriented 60 to the applied load. At higher strains, out-of-plane deformation associated with localized delamination between fiber bundles or damage within fiber bundles is observed. For transverse tensile tests, the splitting is primarily in the 0 axial fibers, which were oriented transverse to the applied load. The initiation and accumulation of local damage causes the global transverse stress-strain curves to become nonlinear and causes failure to occur at a reduced ultimate strain. Extensive delamination at the specimen edges is also observed.

Description: This document is designed as a manual for a user who wants to operate the Pro/ENGINEER (ProE) Wildfire 3.0 with the NASA Space Radiation Program's (SRP) custom-designed Toolkit, called 'Fishbowl', for the ray tracing of complex spacecraft geometries given by a ProE CAD model. The analysis of spacecraft geometry through ray tracing is a vital part in the calculation of health risks from space radiation. Space radiation poses severe risks of cancer, degenerative diseases and acute radiation sickness during long-term exploration missions, and shielding optimization is an important component in the application of radiation risk models. Ray tracing is a technique in which 3-dimensional (3D) vehicle geometry can be represented as the input for the space radiation transport code and subsequent risk calculations. In ray tracing a certain number of rays (on the order of 1000) are used to calculate the equivalent thickness, say of aluminum, of the spacecraft geometry seen at a point of interest called the dose point. The rays originate at the dose point and terminate at a homogenously distributed set of points lying on a sphere that circumscribes the spacecraft and that has its center at the dose point. The distance a ray traverses in each material is converted to aluminum or other user-selected equivalent thickness. Then all equivalent thicknesses are summed up for each ray. Since each ray points to a direction, the aluminum equivalent of each ray represents the shielding that the geometry provides to the dose point from that particular direction. This manual will first list for the user the contact information for help in installing ProE and Fishbowl in addition to notes on the platform support and system requirements information. Second, the document will show the user how to use the software to ray trace a Pro/E-designed 3-D assembly and will serve later as a reference for troubleshooting. The user is assumed to have previous knowledge of ProE and CAD modeling.

Description: This software toolkit is designed to model complex systems for the implementation of embedded Integrated System Health Management (ISHM) capability, which focuses on determining the condition (health) of every element in a complex system (detect anomalies, diagnose causes, and predict future anomalies), and to provide data, information, and knowledge (DIaK) to control systems for safe and effective operation.

Description: Proof-carrying code (PCC) provides a 'gold standard' for establishing formal and objective confidence in program behavior. However, in order to extend the benefits of PCC - and other formal certification techniques - to realistic systems, we must establish the correspondence of a mathematical proof of a program's semantics and its actual behavior. In this paper, we argue that assurance cases are an effective means of establishing such a correspondence. To this end, we present an assurance case pattern for arguing that a proof is free from various proof hazards. We also instantiate this pattern for a proof-based mechanism to provide evidence about a generic medical device software.

Description: Proofs provide detailed justification for the validity of claims and are widely used in formal software development methods. However, they are often complex and difficult to understand, because they use machine-oriented formalisms; they may also be based on assumptions that are not justified. This causes concerns about the trustworthiness of using formal proofs as arguments in safety-critical applications. Here, we present an approach to develop safety cases that correspond to formal proofs found by automated theorem provers and reveal the underlying argumentation structure and top-level assumptions. We concentrate on natural deduction proofs and show how to construct the safety cases by covering the proof tree with corresponding safety case fragments.

Description: This slide presentation reviews the approach to the development of the Global Precipitation Measurement algorithm. This presentation includes information about the responsibilities for the development of the algorithm, and the calibration. Also included is information about the orbit, and the sun angle. The test of the algorithm code will be done with synthetic data generated from the Precipitation Processing System (PPS).

Description: Composite Overwrapped Pressure Vessels (COPVs) that have survived a long service time under pressure generally must be recertified before service is extended. Flight certification is dependent on the reliability analysis to quantify the risk of stress rupture failure in existing flight vessels. Full certification of this reliability model would require a statistically significant number of lifetime tests to be performed and is impractical given the cost and limited flight hardware for certification testing purposes. One approach to confirm the reliability model is to perform a stress rupture test on a flight COPV. Currently, testing of such a Kevlar49 (Dupont)/epoxy COPV is nearing completion. The present paper focuses on a Bayesian statistical approach to analyze the possible failure time results of this test and to assess the implications in choosing between possible model parameter values that in the past have had significant uncertainty. The key uncertain parameters in this case are the actual fiber stress ratio at operating pressure, and the Weibull shape parameter for lifetime; the former has been uncertain due to ambiguities in interpreting the original and a duplicate burst test. The latter has been uncertain due to major differences between COPVs in the database and the actual COPVs in service. Any information obtained that clarifies and eliminates uncertainty in these parameters will have a major effect on the predicted reliability of the service COPVs going forward. The key result is that the longer the vessel survives, the more likely the more optimistic stress ratio model is correct. At the time of writing, the resulting effect on predicted future reliability is dramatic, increasing it by about one "nine," that is, reducing the predicted probability of failure by an order of magnitude. However, testing one vessel does not change the uncertainty on the Weibull shape parameter for lifetime since testing several vessels would be necessary.

Description: Triaxial braid composite materials are beginning to be used in fan cases for commercial gas turbine engines. The primary benefit for the use of composite materials is reduced weight and the associated reduction in fuel consumption. However, there are also cost benefits in some applications. This paper presents a description of the braided composite materials and discusses aspects of the braiding process that can be utilized for efficient fabrication of composite cases. The paper also presents an approach that was developed for evaluating the braided composite materials and composite fan cases in a ballistic impact laboratory. Impact of composite panels with a soft projectile is used for materials evaluation. Impact of composite fan cases with fan blades or blade-like projectiles is used to evaluate containment capability. A post-impact structural load test is used to evaluate the capability of the impacted fan case to survive dynamic loads during engine spool down. Validation of these new test methods is demonstrated by comparison with results of engine blade-out tests.

Description: This slide presentation reviews the applicability of CodeSonar to the Space Network software. CodeSonar is a commercial off the shelf system that analyzes programs written in C, C++ or Ada for defects in the code. Software engineers use CodeSonar results as an input to the existing source code inspection process. The study is focused on large scale software developed using formal processes. The systems studied are mission critical in nature but some use commodity computer systems.

Description: Composite Overwrapped Pressure Vessels (COPVs) are often used for storing pressurant gases on board spacecraft when mass saving is a prime requirement. Substantial weight savings can be achieved compared to all metallic pressure vessels. For example, on the space shuttle, replacement of all metallic pressure vessels with Kevlar COPVs resulted in a weight savings of about 30 percent. Mass critical space applications such as the Ares and Orion vehicles are currently being planned to use as many COPVs as possible in place of all-metallic pressure vessels to minimize the overall mass of the vehicle. Due to the fact that overwraps are subjected to sustained loads during long periods of a mission, stress rupture failure is a major concern. It is, therefore, important to ascertain the reliability of these vessels by analysis, since it is practically impossible to show by experimental testing the reliability of flight quality vessels. Also, it is a common practice to set aside flight quality vessels as "fleet leaders" in a test program where these vessels are subjected to slightly accelerated operating conditions so that they lead the actual flight vessels both in time and load. The intention of fleet leaders is to provide advanced warning if there is a serious design flaw in the vessels so that a major disaster in the flight vessels can be averted with advance warning. On the other hand, the accelerating conditions must be not so severe as to be prone to false alarms. The primary focus of the present paper is to provide an analytical basis for designing a viable fleet leader program for carbon COPVs. The analysis is based on a stress rupture behavior model incorporating Weibull statistics and power-law sensitivity of life to fiber stress level.