Browse Topic: Risk management

Items (306)

Calculation and Test on Ultimate Burst Strength of Tubing

2026-99-1605

7/24/2026

Tubing Ultimate burst strength Full scale test

Cheng, Wenjia, Yang, Hongbin, Ge, Yuan, Zhong, Chongdi, Meng, Lingkun, Ji, Bingyin, Shi, Jiaoqi

811P2 Commercial Aircraft Information Security, Part 2, Risk Assessment Methodology

ARINC811P2 (Current)6/15/2026

The purpose of this standard is to provide airline operators with a structured and practical framework for conducting cybersecurity risk assessments of ground-based systems that interface with or support e-enabled aircraft. By establishing consistent methodologies and practices, the standard aims to ensure that operators can effectively identify, assess, and mitigate cybersecurity risks, thereby safeguarding the safety and airworthiness of their aircraft operations.

Airlines Electronic Engineering Committee

Investigation into Increasing Authority Involvement in the Automotive Development Process by Applying Best Practices from Aviation

2026-01-5021

6/8/2026

This study examines the involvement of authorities in the development processes of aviation and automotive industries by comparing the depth, frequency, and stages of their engagement. The background of this work is an ongoing research initiative focused on transferring methods from aviation to automotive. The method used in this study is an investigation of best practices across both industries. Based on this investigation, two proposals were developed for managing complex technologies, such as autonomous systems. Both proposals advocate for increased authority involvement, particularly during the early stages of projects. One proposal recommends making this enhanced involvement mandatory, while the other suggests it as a guideline rather than a requirement. To assess the benefits of these proposals, a human-input–based feasibility quantification method was applied. This method assesses feasibility on a scale from 0 to 10, where 0 represents the lowest score, 5 is neutral, and 10 is the highest. The results indicate that the proposal recommending enhanced authority involvement achieved a score of 5.79, whereas the proposal mandating it scored 4.54. The conclusion of this study is that increasing authority involvement offers slight benefits when implemented as a recommendation rather than as a mandatory requirement.

Akkus, Yusuf, Annighöfer, Björn

Risk-Driven Program Management Framework for Avionics Development: Integration of Safety, Certification, and Cybersecurity Standards

2026-26-0716

6/1/2026

Modern avionics programs contend with escalating complexity driven by concurrent safety certification, cybersecurity compliance, and multi-standard regulatory demands. Traditional program management approaches treat risk management as a parallel support function rather than a central governance mechanism, resulting in reactive responses that fail to prevent cost and schedule erosion. This paper introduces the Risk-Driven Program Management Framework (RD-PMF), an eight-phase governance model that embeds quantitative risk assessment, standards-risk mapping across DO-178C, DO-326A, ARP4754A, and ARP4761A, real-time digital dashboards, and earned value management within core program decision-making. The framework integrates probabilistic schedule analysis using Monte Carlo simulation with continuous risk exposure monitoring to enable proactive, data-driven governance. RD-PMF is demonstrated through a representative avionics program scenario modelled on a flight control system development effort with a 24-month baseline schedule, $15 million budget, and 27 identified risks. Simulation parameters, informed by the authors’ professional experience in avionics program management and published industry benchmarks, illustrate framework applicability within industry-typical ranges. Five targeted risk mitigation strategies, with a combined investment of $1.27 million addressing certification review delays, requirements volatility, supplier delays, hardware-software integration, and cybersecurity threats, reduced aggregate risk exposure by 77 percent (64.7 to 15.1 schedule-weeks). The demonstration yields an 11 percent schedule performance index improvement (SPI: 0.88 to 0.98), a 6.5 percent cost performance index improvement (CPI: 0.92 to 0.98), schedule variance reduction from 8.0 to 1.2 weeks, and a 2.5-month acceleration in projected completion. Return on investment analysis shows 2.22x gross (1.22x net) on mitigation spending, with total quantified benefits of $2.82 million. These results illustrate a measurable shift from reactive program control to proactive, risk-informed governance suited to next-generation aerospace development programs.

Rahul, Saurabh, Benikireddy, Raghunatha

Integrating Human factors and Predictive Modeling for Enhanced Aviation Safety: A Data - Driven Approach to Risk Mitigation and System Design

2026-26-0795

6/1/2026

This study presents a data-driven approach for strengthening aviation safety by integrating human factors assessment with modern predictive modeling techniques. The work focuses on understanding how human performance, operational conditions, and system-level interactions collectively influence safety risk, and how these interactions can be quantified to support improved design and decision-making. Unlike previous studies that address human factors or predictive modeling in isolation, this research offers a unified framework that links causal human factors indicators with statistical modeling, feature extraction, and machine learning based risk estimation. The novelty of this work lies in the structured pipeline that transforms raw categorical and narrative human factors information into measurable predictors that can be analyzed using structural modeling and machine learning. The methodology includes data preparation, dimensionality reduction, latent pattern discovery, dependence modeling, model training, and interpretability analysis. The study demonstrates how this pipeline uncovers hidden relationships among operational errors, environmental influences, maintenance actions, design considerations, and crew behavior. The findings show that the integrated approach improves the accuracy and stability of risk prediction and highlights specific human factors patterns that consistently contribute to elevated risk levels. These insights support targeted mitigation strategies, inform design improvements, and help prioritize safety interventions. The work concludes that a combined human factors and predictive modeling framework enhances the ability of organizations to identify vulnerabilities earlier, allocate resources more effectively, and strengthen system resilience. This approach is adaptable to diverse aviation contexts and offers a practical path for transforming human factors data into actionable safety intelligence.

Valiyaparambil, Praveen

Non-Intrusive Fatigue Detection for Pilots

2026-26-0793

6/1/2026

Pilot fatigue represents a critical concern in aviation safety, as it can significantly impair cognitive functions, decision-making abilities, and reaction times. In addition to decreasing performance, in-flight chronic fatigue has negative long-term health effects. Possible causes of fatigue include sleep loss, extended time awake, circadian phase irregularities and workload. Conventionally, the risk due to fatigue in aerospace is reduced by flight time limits and controlled rest requirements. Despite regulations limiting flight time and enabling optimal rostering, fatigue cannot be prevented completely. Hence, there is need to detect pilot fatigue in real time. There is ongoing research to detect pilot fatigue using devices that can capture Electroencephalogram (EEG) and Electrocardiogram (ECG). Though these devices have high fidelity, they are intrusive and can limit pilot activity. This limitation could potentially be overcome by non-intrusive devices such as a smart watch/wrist band/goggles which can measure physiological parameters that provide insights into pilot’s mental health. Heart rate variability (HRV) is one such physiological marker of interest for detecting pilot fatigue in real time. HRV can be effectively derived by processing raw Photoplethysmography (PPG) signals to gain insights into the autonomic nervous system, enabling the assessment of physiological state. Wearable devices such as a wristwatch are used in the current study to measure PPG data. Time and frequency domain analysis were performed to evaluate the potential of HRV indices. The analysis of R-R intervals and the Low Frequency / High Frequency (LF/HF) ratio plots, derived from HRV signals, revealed distinct characteristics that differentiate between an alert and a fatigued pilot. This study demonstrates a reliable non-intrusive method for detecting pilot fatigue and enhancing flight safety.

Nyamagoudar, Vinayak, P R, Namratha, Ramachandran, Venkataramani

Reliability Program Standard

JA1000_202108 (Current)

5/26/2026

This SAE standard establishes the requirement for suppliers to plan a reliability program that satisfies the following three requirements: a The supplier shall ascertain customer requirements b The supplier shall meet customer requirements c The supplier shall assure that customer requirements have been met

G-41 Reliability

Requirements for a COTS Assembly Management Plan

EIA933D (Current)

4/20/2026

This document applies to the development of Plans for integrating and managing COTS assemblies in electronic equipment and Systems for the commercial, military, and space markets, as well as other ADHP markets that wish to use this document. For purposes of this document, COTS assemblies are viewed as electronic assemblies such as printed wiring assemblies, disk drives, servers, printers, laptop computers, etc. There are many ways to categorize COTS assemblies1, including the following spectrum: At one end of the spectrum are COTS assemblies whose design, internal parts2, materials, configuration control, traceability, reliability, and qualification methods are at least partially controlled, or influenced, by ADHP customers (either individually or collectively) or by industry standards. An example at this end of the spectrum is a VME circuit card assembly. At the other end of the spectrum are COTS assemblies whose design, internal parts, materials, configuration control, and qualification methods are not controlled, or controllable, in any way by ADHP customers (either individually or collectively) or by industry standards. An example is a disk drive targeted for an industry other than ADHP use. It is critical for the Plan owner to: (1) review and understand the design, internal parts, materials, configuration control, reliability, and qualification methods of all “as-received” COTS assemblies and their capabilities with respect to their application in the intended System and environment; (2) identify risks; and where necessary (3) take additional action to mitigate the risks associated with the performance and reliability of the COTS assembly in the ADHP system.

APMC Avionics Process Management

Culture Clashes: LLM Support in the Engineering of Safety-Critical Systems

2026-01-0110

4/7/2026

The proven usefulness of large language models (LLMs) as tools for software development and the recent rapid increase in their capabilities have made it possible and attractive to extend their scope of application to almost all tasks in the engineering of complex and even safety-critical systems. While these tools promise substantial efficiency gains and improved engineering productivity, they remain prone to errors, and the generated artifacts may not meet the stringent quality requirements for safety-critical systems. In this paper, we systematically analyze potential applications of LLMs throughout the engineering lifecycle of safety-critical systems and identify associated risks as well as practical approaches to risk mitigation. We classify LLM-supported use cases according to LLM autonomy, impact, and artifact observability, and compare the corresponding mitigation strategies with established approaches used for traditional engineering automation. In addition, we examine the cultural and psychological aspects influencing trust in LLM-based engineering tools and the risks of both over-reliance and unwarranted rejection. Our analysis shows that LLMs can provide substantial benefits as engineering support tools, but they also represent a significant source of development risk if applied without appropriate safeguards. Based on these findings, we propose guidelines for responsibly using LLM-based tools in the engineering of safety-critical systems.

Thomas, Carsten, Wagner, Michael

Predictive AEB Activation for Secondary Collision Risk Reduction

2026-01-0518

4/7/2026

Although the evaluation criteria of New Car Assessment Programs (NCAP) continue to evolve, they still predominantly focus on one-to-one collision scenarios. However, accident analyses based on traffic databases from the National Highway Traffic Safety Administration (NHTSA) in the United States and the Institute for Traffic Accident Research and Data Analysis (ITARDA) in Japan indicate that in real-world traffic environments, particularly at intersections with multi-lane arterial roads, complex situations involving multiple vehicles are likely to arise. Further examination of these crash configurations suggests that AEB activation, depending on the resulting stopping position, may entail a potential secondary collision risk under certain intersection conditions. To mitigate secondary collision risks, this study introduces a Secondary Collision Mitigation Logic (SCM Logic), which estimates Time-To-Intercept (TTI) for multiple crossing vehicles to predict when each vehicle will reach the potential collision area. In addition to TTI, the system evaluates whether the ego vehicle’s predicted post-braking position is likely to overlap with the trajectory of a secondary target. This combined assessment enables the system to proactively identify scenarios where a potential risk of secondary side collisions may occur after AEB activation, allowing for earlier intervention than conventional TTC-based methods. The proposed SCM Logic was evaluated in closed-loop virtual simulations with CarMaker. In addition, open-loop vehicle tests with dummy targets were conducted to validate trigger timing, and the avoidance outcomes were assessed through estimated stopping-distance analyses based on measured and assumed parameters. Across representative scenarios, the results indicate a reduction tendency in predicted secondary collision occurrences relative to a baseline AEB. These findings suggest that incorporating multi-vehicle intersection scenarios into future NCAP evaluations would enable a more accurate and realistic assessment of AEB effectiveness in real-world traffic environments. The proposed approach contributes to the advancement of vehicle safety technologies and supports the development of more comprehensive and practical safety standards across the automotive industry.

Kobayashi, Fumiya, Fukuda, Kentaro, Tani, Hiroaki

Driving with Influence: Exploring Crash Factors of Automated Systems in Different Roadway Contexts

2026-01-0526

4/7/2026

Although SAE Level 2 Advanced Driver Assistance Systems (ADAS) and Automated Driving Systems (ADS) have been shown to provide some safety benefits, they have largely been constrained to specific driving contexts, namely motorways for ADAS and lower speed roadways for ADS. As more advanced systems are entering the roadways and their operating conditions are expanding, it remains an ongoing challenge to assess the safe operation of vehicles with automation in different roadway contexts and leverage lessons learned from real-world incidents to create safer and more robust systems. As of August 2025, NHTSA’s Standing General Order on Crash Reporting offers systematic data on such incidents, providing at least a cursory overview of where and how they occur. From this source, a total of 1,375 crash records were extracted, 657 for ADAS systems and 715 for ADS systems. Through the application of association rule mining and a novel metric termed influence, patterns in ADAS- and ADS-related crashes were examined within different roadway contexts. In general, it was found that subject vehicle and crash partner pre-crash movements as well as collision types were some of the most distinguishing factors between the two systems used. Differences in context specific rule summations also indicate distinct crash factor combinations between the two systems. The results offer an initial, exploratory perspective on the impact of vehicle automation on public roadways, providing insights that can inform system-specific safety assessments, risk mitigation strategies, and future research into the evolving dynamics of automated driving technologies.

Astle, W. Abram, Haus, Samantha

Structural Redesign and Functional Integration of an Electrohydraulic Brake Valve for Enhanced Performance and Manufacturability

2026-28-0002

2/12/2026

The Electrohydraulic Brake Valve (EBV) is a vital component in full-power brake systems for heavy-duty and off-highway vehicles, providing precise hydraulic pressure modulation through electrical control. Traditionally, EBV housings are manufactured using bar-machined components, which offer durability but contribute significantly to the overall weight and cost of the assembly. In response to increasing demands for lightweight and cost-effective solutions, this study presents a targeted design optimization of the EBV housing. The redesigned housing adopts a casting-based geometry, integrates sensor ports for pressure monitoring, and includes a nameplate mounting provision for customer identification. Material substitution and structural simplification were employed to enhance manufacturability and performance. Finite Element Analysis (FEA) was used to validate the mechanical integrity of the new design under operational conditions. The optimized EBV assembly achieved a weight reduction of approximately 60% and a cost reduction of nearly 25%, demonstrating the effectiveness of design-led innovation in improving manufacturability.

R, Thangarajan

Thread Inspection Practices

AS5870 (Current)

1/29/2026

This document addresses AS8879 thread inspection issues relating to selection, usage and capability of gages. It addresses the selection of calibrated measurement gages, the need for defined quality metrics, the methodology of determining the appropriate guardband factors, and the minimum inspection requirements for single element pitch diameter gages. Users of this document shall apply the information described herein for the evaluation of the capability of their measurements based on the measurement consumer risk. It involves the analysis of the measurement (product) distribution and biases of both the product and measurement system distributions. It protects the consumer from the worst case distribution results. A whitepaper has been developed to provide supporting documentation and the rationale used in the development of this standard. This whitepaper will be published by the SAE as an Aerospace Information Report (AIR6553). This document recommends the use of ASME B1.2 “Gages and Gaging for Unified Inch Screw Threads” or IFI 301 “Gage Calibration Requirements and Procedures for Thread Gages” as guides for establishing the minimum calibration requirements for all types of thread gages.

E-25 General Standards for Aerospace and Propulsion Systems

Considerations for Vulnerability Management in the Automotive Industry

2026-26-0626

1/16/2026

With the emergence of Software-Defined Vehicles (SDVs), more complex software and connectivity technologies are introduced to support new advanced use cases such as phone as a key, smart parking and vehicle management. However, complex software functionality and external connectivity also increase the attack surface of vehicles and its ecosystem. In this paper, we first perform a classification of recent automotive cybersecurity attacks. We further perform an analysis of these attacks and associated vulnerabilities considering the application of best practices of vulnerability management approaches including Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), and Stakeholder-Specific Vulnerability Categorization (SSVC). CVSS is a standardized framework used to assign severity scores to known vulnerabilities and helps organizations prioritize vulnerability remediation based on severity. EPSS is a predictive model that estimates the probability of a vulnerability being exploited in the next 30 days and complements CVSS by focusing on real-world likelihood of exploitation rather than just severity. SSVC is a decision-making framework for vulnerability handling to help organizations make appropriate remediation decisions considering the specific situation based on, e.g., exploitation activity, mission prevalence and public well-being. We discuss the challenges and benefits of using these different vulnerability management approaches to help automotive organizations manage risks and prioritize handling of vulnerabilities. As auto manufacturers are responsible for the cybersecurity during the lifecycle of their fleet of vehicles, we stress the importance of analyzing and assessing vulnerabilities in a systemic way in order to timely address newly detected vulnerabilities with appropriate responses.

Oka, Dennis Kengo, Vadamalu, Raja Sangili

Post-EOL Cybersecurity Validation for Automotive Production Units

2026-26-0608

1/16/2026

ISO/SAE 21434 emphasizes comprehensive cybersecurity risk management throughout the automotive lifecycle. However, specific guidance on validating cybersecurity measures at the production level remains limited. This paper addresses the gap in production-stage validation, particularly after End-of-Line (EOL) flashing, which includes configurations of security hardware and software protection (e.g., hardware register configuration, Debug and P-flash password settings etc.) Current automotive cybersecurity validation methods, despite adherence to ISO/SAE 21434, lack specific procedures for the production stage. The existing system-level validation using the ASPICE V-model (e.g., SWE.6, SYS.5) does not ensure the integrity and functionality of cybersecurity features in the final manufactured unit post-EOL flashing. This gap poses a risk of vulnerabilities being introduced during the EOL process, compromising critical security measures. To mitigate the cybersecurity risks in production units, particularly the binary which has been introduced during End-of-Life (EOL) flashing, we propose a dedicated testing phase on the right side of the V-cycle. This phase of testing will be focused on identifying and resolving vulnerabilities stemming from EOL flashing processes, such as incorrect memory addresses or erroneous configuration values to activate the cybersecurity protection. The current ASPICE V-cycle process lacks dedicated validation for software flashed via EOL procedures. This proposal addresses this critical gap by advocating for dedicated testing that will verify the integrity of hardware & Software Cybersecurity configuration (example: UCB addresses, values, DEBUG, BMHD passwords etc.,). By implementing this validation process, we aim to substantially strengthen the overall cybersecurity solutions in production units. We have defined the necessary verification criteria and test cases and developed a performance testing strategy for the production unit testing stage. This strategy aims to ensure the robustness and reliability of cybersecurity measures in the final production units.

Chakraborty, Sucheta, Kulanthaisamy, Nagarajan, Sankar, Ganesh

Predictive Analysis and Risk Management of Nickel-Plated Aluminum Automotive Parts Exposed to Harsh Environmental Conditions

2026-26-0305

1/16/2026

Aluminium is widely used across various industries due to its lightweight properties, high strength-to-weight ratio, and cost-effectiveness. However, its susceptibility to corrosion, particularly in harsh environmental conditions, presents challenges to its long-term durability and performance. To mitigate these issues, nickel plating was applied as a protective measure, creating a barrier to minimize aluminium’s direct exposure to corrosive environments and enhance its resistance to degradation. In this study, nickel-plated aluminium was subjected to controlled corrosion testing under simulated real-world conditions, including humidity, saline atmospheres. The primary objective was to evaluate the effectiveness and longevity of nickel plating as a corrosion prevention method. Periodic observations and measurements were conducted to monitor material changes, such as surface degradation, corrosion pattern and corrosion increasing rate. The findings highlight the critical role of plating type, deposition type and environmental conditions in determining the corrosion resistance of nickel-plated aluminium. Based on the study results, recommendations for improving corrosion resistance were proposed, such as optimizing the plating process and incorporating post-plating treatments like passivation or sealing. These insights contribute to advancing corrosion protection strategies, ensuring the sustainability and reliability of aluminium in exposed environments for usage in automotive field.

Narain, Aditya, Venugopal, Sivakumar, Gopalan, Vijaysankar, Varatharajan, Senthilkumaran

Determining Absence of Unreasonable Risk: Proposed Criteria for the Evaluation of an Automated Driving System Deployment

12-09-04-0026

1/12/2026

This article provides an overview of how the determination of absence of unreasonable risk can be operationalized. It complements previous theoretical work published by existing developers of automated driving systems (ADS) on the overall engineering practices and methodologies for readiness determination. Readiness determination is, at its core, a risk assessment process. It is aimed at evaluating the residual risk associated with a new ADS deployment. The article proposes methodological criteria to ground the readiness review process for an ADS release. Specifically, it lists 12 readiness criteria connected with system safety, cybersecurity, verification and validation, collision avoidance testing, predicted collision risks, impeded progress, rules of the road compliance, vulnerable road users interactions, high-severity assessment, conservative estimate of severity, risk management, and field safety. The criteria presented are agnostic of any specific ADS technological solution and/or architectural choice, to support broad implementation by others in the industry. While intended to support the readiness evaluation for the deployment of an SAE Level 4 ADS, their use can also be generalized for lower levels of automation and combined with the unique human interaction challenges applicable to those levels. Following the presentation of the proposed criteria, the article continues with a discussion on governance and decision-making toward approval of a new release candidate for the ADS, inclusive of a discussion on factors that affect residual risk and risk management practices. The implementation of the presented criteria requires the existence of appropriate safety management practices in addition to many other cultural, procedural, and operational considerations. As such, the article is concluded by a statement of limitations for those wishing to replicate part or all of its content. The content presented here serves to inform important ongoing conversations on the topic of ADS certification and the standardization of approval guidelines in international regulatory contexts.

Favaro, Francesca Margherita, Schnelle, Scott, Fraade-Blanar, Laura, Victor, Trent, Peña, Mauricio, Webb, Nick, Broce, Holland, Paterson, Craig, Smith, Daniel

Modeling and Validating Foreseeable Misuse in Safety of the Intended Functionality: A Case Study of Automated Emergency Braking

12-09-03-0017

12/31/2025

This study presents a structured evaluation framework for reasonably foreseeable misuse in automated driving systems (ADS), grounded in the ISO 21448 Safety of the Intended Functionality (SOTIF) lifecycle. Although SOTIF emphasizes risks that arise from system limitations and user behavior, the standard lacks concrete guidance for validating misuse scenarios in practice. To address this gap, we propose an end-to-end methodology that integrates four components: (1) hazard modeling via system–theoretic process analysis (STPA), (2) probabilistic risk quantification through numerical simulation, (3) verification using high-fidelity simulation, and (4) empirical validation via driver-in-the-loop system (DILS) experiments. Each component is aligned with specific SOTIF clauses to ensure lifecycle compliance. We apply this framework to a case of driver overreliance on automated emergency braking (AEB) at high speeds—a condition where system intervention is intentionally suppressed. Initial numerical analysis suggested that the scenario narrowly satisfies the acceptance criteria. Applying the proposed framework to this scenario reveals that significant safety risks can persist even when the system functions according to its design intent. Our findings demonstrate that foreseeable misuse can be formally modeled, simulated, and empirically validated within the SOTIF framework. The proposed approach enables system developers to quantify behavioral risk and assess human-centered edge cases with greater rigor. This work contributes to operationalizing SOTIF for behavioral safety assurance and lays the foundation for future research on risk mitigation through adaptive HMI and context-aware alerts.

Kang, Do Wook, Kim, Woojin, Jang, Eun Hye, Chang, Mi, Yoon, Daesub, Jang, Youn-Seon

Research on Risk Analysis of Emergencies in Heavy-Haul Railway Operations Based on Knowledge Graph

2025-99-0347

12/17/2025

Heavy-haul railways are a critical component of China’s dedicated freight rail network, serving as the primary land transport channel for energy and resource intermodal transportation. Their safe operation and transportation is essential for ensuring the reliable delivery of energy and raw materials. Taking the Shuohuang Heavy-haul Railway as a case study, based on the hazards identified across its entire operational chain, an ontology model structured as "professional module–task–process–hazard–risk attribute–management object" is constructed in this paper. Based on this model, a knowledge graph for heavy-haul railway operational emergencies is established. The study analyzes the connectivity between different nodes (e.g., work processes and hazards) in the knowledge graph and their potential relationships with risk values. Using directed graph-based degree centrality analysis, a risk assessment method incorporating node centrality is proposed. Risk values are computed at both the hazard and process levels, followed by risk ranking and analysis. The risk ranking results demonstrate that considering node centrality yields rankings that better reflect the complex division of labor in heavy-haul railway transportation system, thereby providing more effective support for emergency risk management. The research results can provide decision-making support for the prevention and control of emergencies in heavy-haul railway operations, as well as safety management.

Fu, Liqiang, Ren, Xiaolin, Rong, Lifan

Counterfeit Electrical, Electronic, and Electromechanical (EEE) Parts; Avoidance, Detection, Mitigation, and Disposition

AS5553E (Current)

11/13/2025

This standard is for use by organizations that procure and integrate EEE Parts. These organizations may provide EEE Parts that are not integrated into assemblies (e.g., spares and/or repair EEE Parts). Examples of such organizations include, but are not limited to, the following: Original Equipment Manufacturers; contract assembly manufacturers; maintenance, repair, and overhaul (MRO) organizations; and suppliers that provide EEE Parts or assemblies as part of a service. These requirements are intended to be applied (or flowed down as applicable) through the supply chain to all organizations that procure and integrate EEE Parts and/or systems, subsystems, or assemblies. The mitigation of Counterfeit EEE Parts in this standard is risk based. These mitigation steps will vary depending on the criticality of the application and desired performance and reliability of the equipment/hardware. The requirements of this document are used in conjunction with the organization’s higher-level quality standard(s) (e.g., AS 9100, ISO 9001, ASQ/ANSI E4, ASME NQA-1, AS9120, or equivalent) and other quality management system documents (e.g., AS9110 used by MRO organizations). They are not intended to stand alone, supersede, or cancel requirements found in other quality management system documents, requirements imposed by contracting authorities, or applicable laws and regulations unless an authorized exemption/variance has been obtained. This document is not intended to make a legal determination of fraud, for which appropriate legal counsel should be consulted for further action. For the purposes of this document, the term “risk” is synonymous with Counterfeit Risk.

G-19 Counterfeit Electronic Parts Committee

Ensuring Functional Safety and SOTIF for Autonomous Off-Highway Vehicles: Addressing Risks in Complex Systems

2025-28-0315

11/6/2025

The increasing complexity of autonomous off-highway vehicles, particularly in mining, demands robust safety assurance for Electronic/Electrical (E/E) systems. This paper presents an integrated framework combining Functional Safety (FuSa) and Safety of the Intended Functionality (SOTIF) to address risks in autonomous haulage systems. FuSa, based on ISO 19014[1] and IEC 61508[2], mitigates hazards from system failures, while SOTIF, adapted from ISO 21448[3] addresses functional insufficiency and misuse in complex operational environments. We propose a comprehensive verification and validation (V&V) strategy that identifies hazardous scenarios, quantifies risks, and ensures acceptable safety levels. By tailoring automotive SOTIF standards to off-highway applications, this approach enhances safety for autonomous vehicles in unstructured, high-risk settings, providing a foundation for future industry standards.

Kumar, Amrendra, Bagalwadi, Saurabh

A Review of Current Research and Future Developments in Field Modelling for Traffic Risk Analysis

2025-99-0058

10/17/2025

Discovering the trend of risk changes and formulating risk prevention and control measures are important links in achieving proactive risk prevention and control. Constructing and analyzing field models can visualize the distribution and change of risks and formulate effective risk prevention and control measures. Based on the current situation and trend of field model research, this paper discusses its application in risk identification, aiming to improve the accuracy of risk avoidance. Firstly, different types of field models are classified, and their respective characteristics and application scenarios are introduced. Secondly, the shortcomings in the development of field models are summarised. Finally, in the field of autonomous driving and intelligent traffic management, it is proposed that the accuracy of the model can be improved by multi-scene data fusion, the dynamic response enhances the efficiency of risk avoidance, and the aspect of risk classification in complex environments to enhance the universality of the model provides new ideas for the further application of the field model in the field of intelligent traffic.

Song, Yulian, Yue, Lihong, Wang, Chunxiao

Waterway Traffic Safety Evaluation Based on the Factor Analysis Method

2025-99-0059

10/17/2025

With the continuous advancement of economic globalization, international trade has been developing rapidly, and Marine transportation is an important part of international trade. Shipping and port are facing greater opportunities for development, the shipping industry gradually to the modernization, specialization, large-scale rapid development. The rapid increase of the number of ships, the tonnage of ships, the flow of ships, the density of ships, and the busier of the channel traffic, these changes make the navigable conditions of navigable waters. Under the limited port water conditions, the ship traffic density increases, the ship distress probability increases, and the navigation environment becomes more complex, which make the water transportation safety face greater challenges and threats. The waters of dense traffic flow, danger, accidents, the importance of its navigation safety assessment is self-evident. Preventing some accident risk in the process of ship navigation has become the main content of navigation safety risk management. How to use appropriate methods to evaluate the navigation safety of Shantou waterway is of great significance to improve the management level. Therefore, it is necessary to scientifically and reasonably and accurately evaluate the safety situation of the navigable environment according to the current situation of maritime traffic changes. Combined with the natural environment and navigation situation of water area, this paper establishes various factors that may affect the traffic of water area and establishes the evaluation index system of water traffic safety. Combined with the factor analysis method and the fuzzy comprehensive evaluation method to analyze the safety of the water traffic environment, the evaluation results can provide a decision-making basis for the maritime safety management work.

You, Haowei, Zheng, Zhongyi

A Dynamic Hydroplaning Study: A Fluid–Structure Interaction Model for Road Vehicle Tire Analysis

15-18-03-0015

6/24/2025

Hydroplaning contributes to approximately 20% of traffic accidents during adverse weather conditions, with factors such as velocity, water film thickness, tire inflation, and vehicle weight playing significant roles. This study aims to simulate the hydroplaning phenomenon using a fluid–structure interaction model based on the coupled Eulerian–Lagrangian (CEL) capabilities of ABAQUS. Results reveal that vehicle linear velocity is a key determinant of hydroplaning risk, with a positive correlation observed. The findings suggest maintaining speeds under 50 km/h to mitigate hydroplaning risk, contingent on well-maintained, properly inflated tires. Multiple linear regression analysis further demonstrates correlations among velocity, tire inflation, quarter vehicle load, and water film thickness in predicting the reaction force between the tire and roadway. The proposed scheme provides a predictive mechanism for hydroplaning risk under varying conditions, offering valuable insights into prevention strategies. The proposed scheme offers a valuable predictive mechanism for understanding and mitigating hydroplaning risk by analyzing key environmental and vehicle parameters. It identifies the critical factors influencing hydroplaning, including velocity, tire inflation, water film thickness, and vehicle load, while offering actionable insights to reduce risk. By employing advanced simulation techniques, specifically ABAQUS with CEL capabilities, the model provides a realistic and accurate representation of the hydroplaning phenomenon. Furthermore, the correlation analysis offers a comprehensive understanding of the relationship between multiple variables, enabling risk assessment under varying conditions. This approach not only highlights the underlying physics of hydroplaning but also supports evidence-based strategies for risk reduction and improved vehicle safety.

Aboelsaoud, Mostafa, Taha, Ahmed Abdelsalam, Abo Elazm, Mohamed, Elgamal, Hassan Anwar

Requirements for an Electronic Components Management Plan

EIASTD4899D (Current)

6/17/2025

This document applies to the development of Plans for integrating and managing electronic components in equipment for the military and commercial aerospace markets, as well as other ADHP markets that wish to use this document. Examples of electronic components described in this document include resistors, capacitors, diodes, integrated circuits, hybrids, application specific integrated circuits, wound components, and relays. It is critical for the Plan owner to review and understand the design, materials, configuration control, and qualification methods of all “as-received” electronic components and their capabilities with respect to the application; and to identify risks and, where necessary, take additional action to mitigate the risks. The technical requirements are in Section 3 of this standard and the administrative requirements are in Section 4.

APMC Avionics Process Management

Ultra Heavy Vertical Lift: From Concept to Component

F-0081-2025-0371

5/20/2025

Research into the feasibility of a scaled rim-drive propulsion product to enable ultra-heavy vertical lift (UHVL) is ongoing at the University of South Carolina in partnership with KRyanCreative, LLC, a start-up aerospace small business. The research team is advancing a superconductive design concept for a rotor system that delivers significant performance gains and flight envelope expansion disruptive to the vertical lift transportation sector. The team has conceived a novel electric tip-driven ducted propulsor to guide architectural and engineering investigations that improve hover and acoustic performance over current practice without penalty to weight and cost. This paper summarizes the data and assumptions that emerge from the systems engineering process of requirements decomposition for product realization. Requirements are categorized as to whether they are explicit (programs of record) or implied (comparable business case or as an alternative to a program of record). Risk reduction enroute to technical feasibility is addressed with a methodology that applies predictive analytics aided by artificial intelligence that will accelerate prototype fabrication by 2030 and fast track market incentives for multiple aviation technologies.

Matthews, Rhea, Bayoumi, Abdel, Westerman, Hailey, Parker, Noah, Ryan, Kenneth, Lorusso, Ciarra

Wildlife Strike Mitigation in AAM: Key Technology Gaps and Proposed Solutions

F-0081-2025-0107

5/20/2025

Conflicts between aircraft and flying animals, namely birds and bats, are a persistent hazard across a broad range of missions and geographies. This research proposes a technology-based architecture to provide an end-to-end future solution space for wildlife strike risk mitigation in uncrewed Advanced Air Mobility (AAM) operations. These operations are expected to involve a high density of air vehicles in the region of the atmosphere with the greatest wildlife activity. Many of these operations may be remotely piloted or fully autonomous, removing the primary onboard mitigation of a pilot in the cockpit. Most technologies from the current solution space can be adapted and updated to support future AAM needs, but substantial gaps remain to be filled before full autonomy can be realized. These technological shortfalls should be addressed now, while vehicles and their supporting infrastructure are still in development and mitigation measures can be more readily implemented.

Groll, Margarete, Stepanian, Phillip, Metz, Isabel

Data-Driven Machine Learning Approach for Rattle Risk Mitigation

2025-01-0126

5/5/2025

In the modern automotive industry, squeak and rattle issues are critical factors affecting vehicle perceived quality and customer satisfaction. Traditional approaches to predicting and mitigating these problems heavily rely on physical testing and simulation technologies, which can be time-consuming and resource-intensive, especially for larger models. In this study, a data-driven machine learning approach was proposed to mitigate rattle risks more efficiently. This study evaluated a floor console model using the traditional simulation-based E-line method to pinpoint high-risk areas. Data generation is performed by varying material properties, thickness, and flexible connection stiffness using the Hammersley sampling algorithm, creating a diverse and comprehensive dataset for generating a machine learning (ML) model. Utilizing the dataset, the top contributing variables were identified for training the ML models. Various machine-learning models were developed and evaluated, and the best-performing model was selected based on accuracy and generalizability. A Genetic Algorithm (GA) was employed to optimize the system further, in conjunction with the selected ML model to determine the optimal set of design parameters for rattle mitigation. The optimal operating parameters were validated with simulation results confirming the model's reliability. This optimization process significantly outperformed traditional methods, yielding a time gain of 92 times compared to the solver-based optimization approach with a similar level of accuracy. The proposed methodology reduces computational time and provides a robust framework for efficiently mitigating rattle risks, highlighting the potential of machine learning and data-driven optimization in engineering applications.

Parmar, Azan, Rao, Sohan, Reddy, Hari Krishna

Modeling Virus Infection Risks in Automobile Cabin

2025-01-8176

4/1/2025

In the post Covid era, risk of infection in conditioned space is getting attention and has generated a lot of interest for the design of the new systems and strategies for the management and operations of the existing HVAC systems. Risk management plays a key role where the amounts of outside air and recirculated airs can be used to mitigate the propagation of the virus within the conditioned space. In other words, ventilation plays a huge role within the conditioned space along with strategies based on UV irradiation, ionization and use of highly efficient filters. Different air purification systems have been created by the researchers based on the titanium oxide-based UV photocatalysis system, filters with MERV ratings higher than 11 (ASHRAE Standard 52.2) and HEPA filters. Recent ASHRAE standard 241 (2023) on infectious diseases recommends using high ventilation rates within the conditioned space to reduce virus concentration, and hence, to reduce the risk of infection. Determining risk of infection is difficult as we cannot conduct tests by exposing the passengers to different viruses in vehicle. Instead, empirical models have been developed to predict probability of risk of infection based on a number of variables. This risk of infection is then multiplied by the total population to determine the people infected within the cabin. In this investigation the author has determined the risk of infection by using Wells-Riley and Gammaitoni-Nucci correlations to determine risk of infection for occupants when an infector is present in the vehicle cabin.

Mathur, Gursaran

Toward a Methodology for Safety—Performance Trade-Off Analysis for Connected Automated Vehicles Supported by a Smart Infrastructure

12-08-02-0020

2/24/2025

Introducing connectivity and collaboration promises to address some of the safety challenges for automated vehicles (AVs), especially in scenarios where occlusions and rule-violating road users pose safety risks and challenges in reconciling performance and safety. This requires establishing new collaborative systems with connected vehicles, off-board perception systems, and a communication network. However, adding connectivity and information sharing not only requires infrastructure investments but also an improved understanding of the design space, the involved trade-offs and new failure modes. We set out to improve the understanding of the relationships between the constituents of a collaborative system to investigate design parameters influencing safety properties and their performance trade-offs. To this end we propose a methodology comprising models, analysis methods, and a software tool for design space exploration regarding the potential for safety enhancements and requirements on off-board perception systems, the communication network, and AV tactical safety behavior. The methodology is instantiated as a concrete set of models and a tool, exercised through a case study involving intersection traffic conflicts. We show how the age of information and observation uncertainty affect the collaborative system design space and further discuss the generalization and other findings from both the methodology and case study development.

Fornaro, Gianfilippo, Törngren, Martin, Gaspar Sánchez, José Manuel

Cryptographic Method for Secure Object Segmentation for Autonomous Driving Perception Systems

12-08-01-0008

2/14/2025

The modern-day vehicle’s driverless or driver-assisted systems are developed by sensing the surroundings using a combination of camera, lidar, and other related sensors by forming an accurate perception of the driving environment. Machine learning algorithms help in forming perception and perform planning and control of the vehicle. The control of the vehicle which reflects safety depends on the accurate understanding of the surroundings by the trained machine learning models by subdividing a camera image fed into multiple segments or objects. The semantic segmentation system comes with the objective of assigning predefined class labels such as tree, road, and the like to each pixel of an image. Any security attacks on pixel classification nodes of the segmentation systems based on deep learning result in the failure of the driver assistance or autonomous vehicle safety functionalities due to a falsely formed perception. The security compromisations on the pixel classification head of the object segmentation systems result in falsely segmented pixels from the incoming camera images by corrupted pixel labels with wrong object classes for the pixels. The popular encoder–decoder-based deep learning object segmentation network is considered, which is vulnerable to these attacks in its last fully connected neural network layer. Hence, the cryptographic solution mechanism is proposed here, where the pixel classes are encrypted and signed in the classification network nodes before applying the activation functions. RSA-512 algorithm-based encryption and DSA-512 algorithm-based digital signature are used to generate the proposed cryptographic components. The added cryptographic components are verified upon segmenting the objects to ensure the segmented object information is free from described security attacks. The performance of the proposed cryptographic secure object segmentation is evaluated for the popular segmentation network called U-Net for the Cityscapes segmentation dataset with the proposed cryptographic algorithms. The performance evaluation indicates that the secure semantic segmentation is performed with satisfactory precision, recall, and F1 scores of 0.86, 0.85, and 0.85, respectively, along with the added security components.

Prashanth, K.Y., Rohitha , U.M.

A Case Study of Model-Based Systems Engineering Approach Applied in the SAE BRAZIL AeroDesign Competition

2024-36-0062

12/20/2024

Systems Engineering is a method for developing complex products, aiming to improve cost and time estimates and ensure product validation against its requirements. This is crucial to meet customer needs and maintain competitiveness in the market. Systems Engineering activities include requirements, configuration, interface, deadlines, and technical risks management, as well as definition and decomposition of requirements, implementation, integration, and verification and validation testing. The use of digital tools in Systems Engineering activities is called Model-Based Systems Engineering (MBSE). The MBSE approach helps engineers manage system complexity, ensuring project information consistency, facilitating traceability and integration of elements throughout the product lifecycle. Its benefits include improved communication, traceability, information consistency, and complexity management. Major companies like Boeing already benefit from this approach, reducing their product development time. In the academic environment, competitions such as Formula SAE BRAZIL, Baja, and AeroDesign offer students opportunities to face real challenges like multidisciplinary optimization and prototype testing. Therefore, this work aims to develop the preliminary architecture of an Unmanned Aerial Vehicle (UAV) for the SAE BRAZIL AeroDesign competition, using the MBSE approach. This allows integrating decisions from various departments into a single repository, generating customized maps and tables to represent the created traceability. The UAV architecture focuses on aerodynamics and its impact on landing and takeoff performance. The secondary objective is to provide a study of best practices for teams participating in the SAE BRAZIL AeroDesign competition and for industries facing systemic challenges in their products. Utilizing the MagicGrid method, SysML language, and relevant aeronautical references, the results include interconnected maps and tables that maintain updated information, enable quick verification of aircraft configurations against competition requirements, and reduce the need for constant manual rework.

Azevedo, Marcos Paulo, Lahoz, Carlos Henrique Netto

Battery analysis pioneer: North America has five years to catch China

24AUTP12_06

12/1/2024

North American automakers and EV battery firms have five years to erase China's dominance in technology and manufacturing or they may face the reality of buying batteries from China for the foreseeable future. That was the message from battery-analysis company Voltaiq CEO Tal Sholklapper at a media briefing in Detroit. “We're in the final innings now,” Sholklapper said. “If the industry around batteries and electric vehicles and all the follow-on applications wants to make it, we're going to have to change the way we play.”

Clonts, Chris

Risk Assessment for Urban Logistics Operation of UA

2024-01-7017

11/15/2024

In the context of insufficient international management experience, this study combines the current situation of Chinese aviation and the characteristics of unmanned aircraft (UA) operation, adopts the specific operations risk assessment (SORA) method, and conducts in-depth research on the trial operation risks of UA in urban low-altitude logistics scenarios, conducting effective evaluations and project practices. This study starts from two dimensions of ground risk and air risk, determines the boundaries required for safe operation of UA, and improves the robustness level of UA operation through ground risk mitigation measures and air risk mitigation measures. At the same time, a series of compliance verification methods are provided to meet 24 operational safety objectives (OSO) (including design characteristics, operational limitations, performance standards, safety characteristics, communication requirements, emergency response plans, etc.), ensuring that UA operation does not pose unacceptable risks to personnel, property, or the environment.In addition, the results of this study provide an evaluation tool for regulatory agencies, operators, and relevant third parties to determine the confidence level of low-altitude operation of UA in cities, evaluate the possibility of safe operation, and provide scientific basis for the healthy development of the UA industry. This study selects Shenzhen, a typical urban residential environment, to carry out a beyond visual line-of-sight (BVLOS) UA logistics project. Through the operation practice of fixed routes, valuable experience and data have been accumulated. Not only did it directly test the operational capability of UA in complex urban airspace, but it also explored service modes for safe and effective integration in high population density areas. Through the practical experience of urban logistics UA risk assessment projects, this study help operators comprehensively examine the trial operation model, accurately identify key risk factors, better understand and manage potential risks, and fundamentally improve operational safety. At the same time, the application of assessment methods also assists regulatory agencies in formulating scientific and reasonable regulatory policies, balancing the safe operation of UA and the development of low-altitude economy, providing reference cases for urban air traffic management.

Li, Li, Liu, Weiwei, Fu, Jinhua

A Novel Resource-Aware Distributed Cooperative Decision-Making Mechanism for Connected Automated Vehicles

12-07-04-0030

9/6/2024

This article proposes a new model for a cooperative and distributed decision-making mechanism for an ad hoc network of automated vehicles (AVs). The goal of the model is to ensure safety and reduce energy consumption. The use of centralized computation resource is not suitable for scalable cooperative applications, so the proposed solution takes advantage of the onboard computing resources of the vehicle in an intelligent transportation system (ITS). This leads to the introduction of a distributed decision-making mechanism for connected AVs. The proposed mechanism utilizes a novel implementation of the resource-aware and distributed–vector evaluated genetic algorithm (RAD-VEGA) in the vehicular ad hoc network of connected AVs as a solver to collaborative decision-making problems. In the first step, a collaborative decision-making problem is formulated for connected AVs as a multi-objective optimization problem (MOOP), with a focus on energy consumption and collision risk reduction as example objectives. RAD-VEGA then cooperatively solves this MOOP, taking into account the availability of AV’s onboard resources and the application layer characteristics of today’s ITS communication tools. The performance of the proposed mechanism is evaluated by solving the ZDT1 test problem and studying pareto-frontier solutions to the true front over time. The scalability of the proposed solution is estimated to be 305 CAVs, considering a communication bandwidth of 6 MB/s. Additionally, cooperative AV planning scenario examples are simulated, and the effectiveness of the proposed mechanism is demonstrated by comparing final and initial solutions after solving the MOOP using RAD-VEGA.

Ghahremaninejad, Reza, Bilgen, Semih

Systematic Selective Limits Application Using Decision-Making Engines to Enhance Safety in Highly Automated Vehicles

12-08-01-0005

8/1/2024

The traditional approach to applying safety limits in electromechanical systems across various industries, including automated vehicles, robotics, and aerospace, involves hard-coding control and safety limits into production firmware, which remains fixed throughout the product life cycle. However, with the evolving needs of automated systems such as automated vehicles and robots, this approach falls short in addressing all use cases and scenarios to ensure safe operation. Particularly for data-driven machine learning applications that continuously evolve, there is a need for a more flexible and adaptable safety limits application strategy based on different operational design domains (ODDs) and scenarios. The ITSC conference paper [1] introduced the dynamic control limits application (DCLA) strategy, supporting the flexible application of diverse limits profiles based on dynamic scenario parameters across different layers of the Autonomy software stack. This article extends the DCLA strategy by outlining a methodology for safety limits application based on ODD elements, scenario identification, and classification using decision-making (DM) engines. It also utilizes a layered architecture and cloud infrastructure based on vehicle-to-infrastructure (V2I) technology to store scenarios and limits mapping as a ground truth or backup mechanism for the DM engine. Additionally, the article focuses on providing a subset of driving scenarios as case studies that correspond to a subset of the ODD elements, which forms the baseline to derive the safety limits and create four different application profiles or classes of limits. Finally, the real-world examples of “driving-in-rain” scenario variations have been considered to apply DM engines and classify them into the previously identified limits application profiles or classes. This example can be further compared with different DM engines as a future work potential that offers a scalable solution for automated vehicles and systems up to Level 5 Autonomy within the industry.

Garikapati, Divya, Liu, Yiting, Huo, Zhaoyuan

Electrification and Autonomy: Vol. 2

EPRCOMPV342023

5/10/2024

The extent of automation and autonomy used in general aviation (GA) has been steadily increasing for decades, with the pace of development accelerating recently. This has huge potential benefits for safety given that it is estimated that 75% of the accidents in personal and on-demand GA are due to pilot error. However, an approach to certifying autonomous systems that relies on reversionary modes limits their potential to improve safety. Placing a human pilot in a situation where they are suddenly tasked with flying an airplane in a failed situation, often without sufficient situational awareness, is overly demanding. This consideration, coupled with advancing technology that may not align with a deterministic certification paradigm, creates an opportunity for new approaches to certifying autonomous and highly automated aircraft systems. The new paths must account for the multifaceted aviation approach to risk management which has interlocking requirements for airworthiness and operations (including training and airspace integration). They occur across a variety of different operational paradigms with varying roles for the human and the systems in question. If implemented properly, autonomy can take GA safety to the next level while simultaneously increasing the number and variety of aircraft and transportation options they provide.

Dietrich, Anna Mracek, Rajamani, Ravi

System Installation Disparity between Theory and Practice

F-0080-2024-1126

5/7/2024

When the target value of functional geometrical specification is too tight, its cascade of tolerances is at the feasibility limit of production. In this case, the geometrical Tolerancing method loses its benefits and generates an excessive level of non-Conformity which induces additional costs that are not acceptable. The aim of this paper is first to introduce the background concerning chain of dimension method and tolerances capabilities based on test specimen results. Secondly, demonstrate ability to apply statistical calculation. Thirdly extend conventional chain of dimension in one dimension to multi-holes system installation. And, then analyze potential effect by stress evaluation. And confirm the demonstration of improvement on Tolerancing installation calculations, by onboarding all stakeholder (design, manufacturing, stress) early in design phase (interfaces maturation) and by analyzing more in detail installations constraints. This method should be applied first on "non-critical" junction, because it needs to be further matured and so it is not yet mature enough for primary structure and associated quality checks. In conclusion, as a result, it is possible to increase tolerance specification of parts and manage risks of non-assembly. In conclusion, tolerances for holes localization could be approximatively multiplied by two compared to basic calculation method.

Gatti, Jean-Loup, Dayan, David, Anthonioz, Hugo, Fruitet, Pierre

Overview of the Subscale RAVEN Flight Controls and Modeling Testbed

F-0080-2024-1185

5/7/2024

The Research Aircraft for eVTOL Enabling TechNologies (RAVEN) Subscale Wind-Tunnel and Flight Test (SWFT) model is a subscale aircraft built for flight dynamics and controls research demonstrated in wind-tunnel and flight-test experiments. The intent of this paper is to provide a summary of past, current, and future efforts being pursued by the RAVEN-SWFT project. Initially, vehicle development guidelines were crafted by a multidisciplinary team to ensure that the RAVEN-SWFT vehicle was well suited for research in multiple areas, including aero-propulsive modeling, flight controls, and autonomy, among others. The vehicle has been used to obtain extensive wind-tunnel data, enabling aero-propulsive model development across the transition flight envelope and validation of computational tools. The vehicle will be used to conduct flight testing in order to evaluate modeling strategies and flight control logic. The RAVEN-SWFT model also serves as a risk reduction activity for a conceptual, full-scale vehicle in the 1000-lb class. The next steps in the project are to successfully demonstrate free flight in hover, transition, forward flight, and the reverse thereof, utilizing custom control laws integrated onto the RAVEN-SWFT avionics hardware. The project intends to publicize all of the geometry, data, and methods in future reports.

Geuther, Steven, Ackerman, Kasey, Simmons, Benjamin

Redefining Space Commerce: The Move Toward Servitization

EPR2024002

1/9/2024

“New Space" is reshaping the economic landscape of the space industry and has far-reaching implications for technological innovation, business models, and market dynamics. This change, aligned with the digitalization in the world economy, has given rise to innovations in the downstream space segment. This “servitization” of the space industry, essentially, has led to the transition from selling products like satellites or spacecraft, to selling the services these products provide. This also connects to applications of various technologies, like cloud computing, artificial intelligence, and virtualization. Redefining Space Commerce: The Move Toward Servitization discusses the advantages of this shift (e.g., cost reduction, increased access to space for smaller organizations and countries), as well as the challenges, such as maintaining safety and security, establishing standardization and regulation, and managing risks. The implications of this may be far-reaching, affecting not only the space industry but also related fields, such as defense, telecommunications, and activity monitoring. This report also explores the transformative changes happening in the space sector and their impact on economic evaluation and space policy. Click here to access the full SAE EDGETM Research Report portfolio.

Khan, Samir

MDR: Regulating Devices That Don’t Have an Intended Medical Purpose

TBMG-49649

12/1/2023

In late 2022, the EU Medical Device Regulation (MDR) was expanded by the addition of the common specifications (CS) 2022/20346. The spe00cifications describe the aspects that must be examined for devices without an intended medical purpose. These aspects apply in addition to the classical MDR requirements and include certain aspects of risk management. In other words, even products that only serve aesthetic purposes, such as colored contact lenses, will be assessed in accordance with the strict MDR regulations and, in addition, will have to fulfill the requirements laid down in the CS 2022/2346.

A Global Survey of Standardization and Industry Practices of Automotive Cybersecurity Validation and Verification Testing Processes and Tools

12-07-02-0013

11/16/2023

The United Nation Economic Commission for Europe (UNECE) Regulation 155—Cybersecurity and Cybersecurity Management System (UN R155) mandates the development of cybersecurity management systems (CSMS) as part of a vehicle’s lifecycle. An inherent component of the CSMS is cybersecurity risk management and assessment. Validation and verification testing is a key activity for measuring the effectiveness of risk management, and it is mandated by UN R155 for type approval. Due to the focus of R155 and its suggested implementation guideline, ISO/SAE 21434:2021—Road Vehicle Cybersecurity Engineering, mainly centering on the alignment of cybersecurity risk management to the vehicle development lifecycle, there is a gap in knowledge of proscribed activities for validation and verification testing. This research provides guidance on automotive cybersecurity testing and verification by providing an overview of the state-of-the-art in relevant automotive standards, outlining their transposition into national regulation and the currently used processes and tools in the automotive industry. Through engagement with state-of-the-art literature and workshops and surveys with industry groups, our study found that national regulatory authorities are moving to enshrine UN R155 as part of their vehicle regulations, with differences of implementation based on regulatory culture and pre-existing approaches to vehicle regulation. Validation and verification testing is developing aligned to UN R155 and ISO21434:2021; however, the testing approaches currently used within industry utilize elements of traditional enterprise information technology methods for penetration testing and toolsets. Electrical/electronic (E/E) components such as embedded control units (ECUs) are considered the primary testing target; however, connected and autonomous vehicle technologies are increasingly attracting more focus for testing.

Roberts, Andrew, Marksteiner, Stefan, Soyturk, Mujdat, Yaman, Berkay, Yang, Yi

Criticality Metrics Study for Safety Evaluation of Merge Driving Scenarios, Using Near-Miss Video Data

09-12-01-0002

9/15/2023

In autonomous driving vehicles with an automation level greater than three, the autonomous system is responsible for safe driving, instead of the human driver. Hence, the driving safety of autonomous driving vehicles must be ensured before they are used on the road. Because it is not realistic to evaluate all test conditions in real traffic, computer simulation methods can be used. Since driving safety performance can be evaluated by simulating different driving scenarios and calculating the criticality metrics that represent dangerous collision risks, it is necessary to study and define the criticality metrics for the type of driving scenarios. This study focused on the risk of collisions in the confluence area because it was known that the accident rate in the confluence area is much higher than on the main roadway. There have been several experimental studies on safe driving behaviors in the confluence area; however, there has been little study logically exploring the merging actions with mathematical metrics. In light of this, this study introduces a criticality metric representing the risk of a collision in a junction area. The metric calculates the reaction level required to avoid a predicted collision risk; therefore, a safety evaluation can be performed by assessing the reaction effort to prevent such collisions in a driving scenario. The near-miss video data from the database is used to validate the proposed metric for the merging scenario. The database contains various real merging scenarios experienced by human drivers. The proposed metric was validated to identify a critical situation with collision risks and a safe driving situation that can prevent collisions easily, using sample data of merging scenarios from the database. Moreover, an example application for safety assessment was investigated. In summary, the safety performance of autonomous driving vehicles in merging can be evaluated through simulations using the criticality metric. In the future, the results of this study could be applied to develop an on-board risk detection function in the confluence area.

Imaseki, Takashi, Sugasawa, Fukashi, Kawakami, Eriko, Mouri, Hiroshi

Advanced Value Stream Mapping: Development of a Conceptual Model Considering Variability in Production Processes

05-16-04-0025

9/7/2023

Recently, lean manufacturing (LM) practices are being combined with tools and techniques that belong to other areas of knowledge such as risk management (RM). Value stream mapping (VSM) is a well-known tool in showing the value, the value stream, and the flow, which represents the three lean principles. VSM and RM, when used in tandem with one another, are more advantageous in covering VSM issues such as the variability of production processes. In this article, a conceptual model that integrates the two is shown and explained. The model helps to generate scenarios of current state map (CSM) and future state map (FSM) in a dynamic way by identifying current and potential risks. These risks might happen in the future, bringing with it negative ramifications including not reaching the main objectives within the defined time. The model has been tested in a coffee production company belonging to health and food sector. The proposed model specified the ranges of variability through the drawing of CSM and FSM. This is quite a milestone because one of the challenges of VSM is that it is a static tool, and, as such, process variability cannot be captured appropriately. This new model is expected to overcome this drawback.

Araibi, Alaa Salahuddin, Shaiful, A. I. M., Shadhar, Mohanad Hatem

Guideline for Counterfeit Electrical, Electronic, and Electromechanical (EEE) Parts; Avoidance, Detection, Mitigation, and Disposition Systems

ARP6328A (Current)

9/7/2023

The content of ARP6328 contains guidance for implementing processes used for risk identification, mitigation, detection, avoidance, disposition, and reporting of counterfeit electrical, electronic, and electromechanical (EEE) parts and assemblies in accordance with AS5553 Revision D. This document may also be used in conjunction with other revisions of AS5553. This document retains guidance contained in the base document of AS5553, updated as appropriate to reflect current practices. This is not intended to stand alone, supersede, or cancel requirements found in other quality management system documents, requirements imposed by contracting authorities, or applicable laws and regulations unless an authorized exemption/variance has been obtained.

G-19 Counterfeit Electronic Parts Committee

Sensor System Decreases Fall Risk for Older Adults

TBMG-48982

9/1/2023

A research team has designed a fall-risk assessment system that enables doctors to create personalized risk-management strategies for patients based on their individual movement patterns at home.

Standard for Developing a Lead-Free Control Plan to Manage the Risks of Lead-Free Solders and Finishes in Aerospace, Defense, and High-Performance Soldered Electronic Products

GEIASTD0005_1B (Current)

8/1/2023

This technical report identifies the requirements for an LFCP for ADHP soldered electronic products built fully or partially with Pb-free materials and assembly processes. An LFCP documents the specific Pb-free materials and assembly processes used to assure customers their ADHP soldered electronic products will meet the applicable reliability requirements of the customer. This standard specifically addresses LFCPs for: a Pb-free components and mixed assembly: Products originally designed and qualified with SnPb solder and assembly processes that incorporate components with Pb-free termination finishes and/or Pb-free BGAs, i.e., assembling Pb-free parts using eutectic/near-eutectic SnPb processes (also known as mixed metallurgy). b COTS products: COTS products likely built with Pb-free materials and assembly processes. c Pb-free design and assembly: Products designed and qualified with Pb-free solder and assembly processes. This standard does not include detailed descriptions of the processes to be documented in an LFCP, but lists high-level requirements for ADHP soldered electronic products using Pb-free materials and assembly processes, such as requirements for manufacturing and reliability, configuration control and product identification, and rework, repair, and maintenance. This standard is structured to enable tailoring, i.e., deleting, adding, or modifying requirements as applicable to the product, system or program under consideration. Tailoring GEIA-STD-0005-1 requires agreement between the LFCP user and customer before implementation.

G-24 Pb-free Risk Management Committee for ADHP

Cybersecurity for Entrepreneurs

R-5365/30/2023

One data breach can close a small business before it even gets going. With all that is involved in starting a new business, cybersecurity can easily be overlooked but no one can afford to put it on the back burner. Cybersecurity for Entrepreneurs is the perfect book for anyone considering a new business venture. Written by cybersecurity experts from industry and academia, this book serves as an all-inclusive reference to build a baseline of cybersecurity knowledge for every small business. Authors Gloria D'Anna and Zachary A. Collier bring a fresh approach to cybersecurity using a conversational tone and a friendly character, Peter the Salesman, who stumbles into all the situations that this book teaches readers to avoid. Cybersecurity for Entrepreneurs includes securing communications, protecting financial transactions, safeguarding IoT devices, understanding cyber laws, managing risks, and assessing how much to invest in cyber security based on specific business needs. Click here to access The Mobility Frontier: Cybersecurity on the Air & Ground.

D'Anna, Gloria, Collier, Zachary A.

A Near-Term Path to Assured Aerial Autonomy

01-16-03-0020

4/21/2023

Autonomy is a key enabling factor in uncrewed aircraft system (UAS) and advanced air mobility (AAM) applications ranging from cargo delivery to structure inspection to passenger transport, across multiple sectors. In addition to guiding the UAS, autonomy will ensure that they stay safe in a large number of off-nominal situations without requiring the operator to intervene. While the addition of autonomy enables the safety case for the overall operation, there is a question as to how we can assure that the autonomy itself will work as intended. Specifically, we need assurable technical approaches, operational considerations, and a framework to develop, test, maintain, and improve these capabilities. We make the case that many of the key autonomy functions can be realized in the near term with readily assurable, even certifiable, design approaches and assurance methods, combined with risk mitigations and strategically defined concepts of operations. We present specific autonomy functions common to many civil beyond visual line of sight (BVLOS) operations and corresponding design assurance strategies, along with their contributions to an overall safety case. We provide examples of functions that can be certified under existing standards, those that will need runtime assurance (RTA) and those that will need to be qualified with statistical evidence.

Bartlett, Paul, Chamberlain, Lyle, Singh, Sanjiv, Coblenz, Lauren

Counterfeit Electrical, Electronic, and Electromechanical (EEE) Parts: Avoidance, Detection, Mitigation, and Disposition - Independent Distribution

AS6081A (Current)

4/21/2023

This SAE Aerospace Standard (AS) standardizes practices to identify reliable sources to procure electrical, electronic, and electromechanical (EEE) parts, assess and mitigate the risk of distributing suspect counterfeit or counterfeit EEE parts, control suspect counterfeit or counterfeit EEE parts, and report incidents of suspect counterfeit and counterfeit EEE parts.

G-19 Counterfeit Electronic Parts Committee

Items per page:

1 – 50 of 306