ML23192A071
| ML23192A071 | |
| Person / Time | |
|---|---|
| Issue date: | 06/29/2023 |
| From: | Sushil Birla NRC/RES/DE |
| To: | |
| Sushil Birla 301-415-2311 | |
| References | |
| Download: ML23192A071 (18) | |
Text
Assurance:
Cyber Physical Systems Presenter: Sushil Birla Office of Nuclear Regulatory Research Division of Engineering 1
Exploring International Collaboration June 29, 2023
Outline 1.
Historic background of U.S. Govt Policy on this topic:
White House Office of Science & Technology Policy (OSTP):
NSTCCoT NITRD IWGs {CPS>CNPS; }
USA-NSF Cyber-Physical Systems (CPS) Program The Jeannette Wing flower model Example case: NPP digital reactor protection systems OSTP M-14-11 SEI 2.
A plausible Assurance R&D roadmap Co-developed with the Software Engineering Institute circa 2014 3.
International collaboration opportunities 4.
Discussion 2
Inter-agency CPS coordination background OSTP M-14-11 guidance summary:
Address societal needs where private sector cannot make the required investments economically.
In supporting tools and infrastructure, seek opportunities to leverage resources from other agencies and the private sector.
Clean energy: Safe use of nuclear energy Preserve & provide access to knowledge in corpus Advance state of the art in enabling technologies for industries of the future that benefit multiple sectors:
- Example (not from OSTP): CPS developed with built-in assurance
- OUSD(R&E)DDR&E(S&T) SEI: historic background of vision.
3
CPS Generalization-Specialization framework Adapted from NSF21551: https://www.nsf.gov/pubs/2021/nsf21551/nsf21551.htm Concept inspired by Jeannette M. Wing 4
Common core auto finance civil aero health chemical materials energy Domain-specific R&D:
- Industry
- Govt (e.g.: NASA)
Demo/pilot, e.g.:
- NRC Common core R&D:
- Govt-funding
- To Academia transportation nuclear medical devices Space
Evolve Assurance capability incrementally Time Capability Current state S
Goal state G
State S+1 State S+2 State S+3 Goal state G-1 Goal state G-2
Evolve Assurance capability: NPP Case Time Capability Current state S
S+1 S+2 S+3 Concept Requirements System architecture Software architecture S+4 Detailed design S+6 Implementation G
Application acceptance Design certification ITAAC
S+5
Object is certified Evaluate Accredited 3rd party Pre-certified Procedures Pre-certified Facilities Pre-certified People Accrediting, certifying authority International common core standards Country-specialized evaluation criteria Rework cycle accredit certify Learning cycle Object of evaluation One vision of the Assurance Process submit derive Evaluation-basis
Ob Object of pre-certification:
Object is certified Evaluate Accredited certifying authority People Rework cycle Learning cycle Envisioned pre-certification activities Tools Processes Procedures Methods & techniques Facilities Other reusable assets, e.g.:
- Libraries
Creating the appropriate standards: One vision Ob Technical basis for:
People Tools Processes Procedures Methods & techniques Facilities Other reusable assets, e.g.:
- Libraries R&D organization Government Coordinator Standards body Standard Guideline develops Other voices
Reasoning Model to support performance-based evaluation 10 Reasoning Assertion Premise / Evidence Factors influencing validity of evidence link Challenges; rebuttals; inconsistencies Qualifiers (Strength; Condition)
Inference rule Theoretical or causal model Basis for Used in (based on the Toulmin model)
7 Introduction to Assured Software Engineering
© 2018 Carnegie Mellon University
[DISTRIBUTION STATEMENT A] Approved for public release and unlimited distribution.
Understanding the Cost of Correcting Defects McConnell, Steve. Software Quality at Top Speed. August 1996.
http://www.stevemcconnell.com/articles/art04.htm
Refinement principle Requirements Architecture Detailed design Implementation Abstraction Declarative (what)
Imperative (how)
Concretion R
E F
I N
E M
E N
T
Leverage domain engineering Development Phase Requirements Architecture Detailed design Implementation Constraints to enable refinement Domain-specific controlled natural language Domain-specific architecture modeling language Domain-specific design specification language Domain-specific coding/programming language Semantically compatible Semantically compatible Semantically compatible refinement refinement refinement Create precertified reusable assets Domain modeling Domain engineering (see IEEE Std 1517:2010; ISO/IEC 26550; NUREG/CR-6263)
Holistic roadmap needed
- 1. Technical infrastructure
- 2. Integrated development & assurance
- 3. Business case development
- 4. Community development
- 5. Workforce development 14
Why holistic? Effects of Missing Elements of Change Vision Capable Workforce Capable Processes Organizational Culture Action Plan Resources Incentives Change Confusion Sporadic change Misaligned behaviors Barriers to change Reinventing the wheel Adapted by Dr. Palma Buttles-Valdez, SEI from: Delorise Ambrose, 1987 Anxiety &
frustration Slow or little progress Sanctions reinforcements Capable Workforce Capable Processes Organizational Culture Action Plan Resources Incentives Sanctions reinforcements Vision Capable Workforce Capable Processes Organizational Culture Action Plan Incentives Sanctions reinforcements Vision Capable Processes Organizational Culture Action Plan Resources Incentives Sanctions reinforcements Vision Capable Workforce Organizational Culture Action Plan Resources Incentives Sanctions reinforcements Vision Capable Workforce Capable Processes Action Plan Resources Incentives Sanctions reinforcements Vision Capable Workforce Capable Processes Organizational Culture Action Plan Resources Sanctions reinforcements Vision Capable Workforce Capable Processes Organizational Culture Action Plan Resources Incentives False starts Vision Capable Workforce Capable Processes Organizational Culture Resources Incentives Sanctions reinforcements
Some challenging areas of research 1.
Identification & prevention of hazards rooted in engineering 2.
Formulation of safety requirements 3.
Flow-down; Correct-by-construction evidence generation 4.
Performance-based Assurance Framework 1.
CPS ontological framework: General; domain-specific 2.
Composability 5.
Education Technology 6.
Science-based business case
Discussion
[Discussion notes]
17
Acronyms AF/FAA - Air Force/Federal Aviation Administration ASD(R&E) - Office of the Assistant Secretary of Defense for Research & Engineering CISE - Computer & Information Science & Engineering CPS - Cyber Physical Systems DoD - Department of Defense EPRI - Electric Power Research Institute FDA - U.S. Food and Drug Administration ITAAC - Inspection, Test, Analysis and Acceptance Criteria NASA - National Aeronautics and Space Administration NIH - National Institutes of Health NIST - National Institute of Standards & Technology NPP - Nuclear Power Plant NRC - U.S. Nuclear Regulatory Commission NSA - National Security Agency NSF - National Science Foundation OSTP - Office of Science and Technology Policy R&D - Research and Development RPS - Reactor Protection System SEI - Software Engineering Institute ST - Science and Technology VU - Vanderbilt University 18