American Institute of Aeronautics and Astronautics (AIAA) Complex

advertisement
American Institute of Aeronautics and Astronautics
(AIAA)
Complex Aerospace Systems Exchange (CASE)
Pasadena, California
September 11-13, 2012
Report of the Sessions of Track 2
CONTENTS
Topic
Page
DAY 1
CASE Opening Plenary Session
2
CASE Track 2, Session 1: Planning and Executing an Integration Test
Strategy for a Complex Aerospace System
3
DAY 2
CASE Track 2, Session 2: Integration of Modeling and Simulation,
Ground Test, and Flight Test
11
CASE Track 2, Session 3: Verification and Validation Issues
20
DAY 3
CASE Track 2, Session 4: Lessons Learned in Integration, Test, and
Verification
26
CASE Closing Session
30
Recurring Topics
36
1
Complex Aerospace Systems Exchange (CASE)
American Institute of Aeronautics and Astronautics (AIAA)
Pasadena, California
September 11-13, 2012
Report of the Sessions of Track 2
Day 1
CASE Opening Plenary Session
Laura McGill, Deputy Vice President of Engineering, Raytheon Missile Systems,
AIAA Vice President, Standards, General Chair (CASE): Opening statement
 Why CASE?
o Systems integration becoming more complex.
o Opportunity for experts to share knowledge.
o Program is focused to benefit various players in systems integration:
– Track 1: Chief engineers
– Track 2: Test professionals
– Track 3: Program managers (PMs)
o Should be of interest also to mid-career professionals moving from
specializations to Integrated Product Team (IPT) positions.
 Next CASE scheduled August 12-13, 2013, Los Angeles Hyatt-Regency.
o Will address hard-hitting issues around program execution:
– Budgets
– Schedules
Michael Griffin, Chairman and CEO, Schafer Corporation, AIAA President,
Executive Chair (CASE): Opening statement
Theme: Systems Engineering (SE)
 SE does not yet have well-defined theory.
o We can identify the great practitioners, but we are not sure why they
are great.
 Projects succeed or fail by the ability of systems engineers to foresee failures
and determine mitigations.
2
Day 1 (continued)
CASE Track 2, Session 1: Planning and Executing an Integration Test Strategy for
a Complex Aerospace System
This session was chaired by Phil Stich, Deputy General Manager, ATA, Arnold
Engineering Development Complex, and moderated Ed Kraft, Chief Technologist,
Arnold Engineering Development Complex. Panelists are identified below with their
individual presentations.
Moderator’s Introduction
Ed Kraft, Chief Technologist, Arnold Engineering Development Complex:
Planning and Executing an Integration Test Strategy for a Complex Aerospace
System
Theme: This presentation was an introduction to the session topic and sets the stage
for further discussion by attempting to establish some definitions and boundary
conditions. The moderator contrasted aerospace industry development cycle times to
auto and Integrated Circuit IC industries where rapid fielding is paramount to market
success.
 System complexity is not inherent in rampant, runaway acquisition time cycles.
Reasons may be found in:
o Poor architecture choices.
 Aerospace systems start with a clean sheet in each program.
 Auto and IC industries use common platforms over time.
o Processes and process ownership.
 Many are outdated and need improvement.
 Auto and IC industries own their own processes.
o Accountability
 Problem in aerospace industry.
 Program reviews are not sufficiently demanding.
o Capacity
 Aerospace capacity is periodically diminished by cycles of cutting
back after major wars and conflicts.
 Diminished capacity drives development costs up.
 The complexity of processes and environments are often more severe than the
complexity of the complex system under development.
o This is an organizational problem.
 Definitions: Complex vs. Complicated
o Complex
 Parts are interdependent, often changing, and outcomes are less
predictable.
3

 Hard to ”see” the whole, but only what’s available from your
vantage point.
 Complex systems are not constructed, they are grown.
 Complex systems are dynamic—that is, they’re constantly changing
and adapting to current conditions.
o Complicated
 Not simple, but knowable.
 Clear links between causes and effects.
 Tend to give predictable results, as long as the same thing is done
the same way, each time.
 Focus needs to be on diligence and accuracy when following
particular steps in a process.
o Do not confuse the two, and integrate as early as possible.
 Have complicated systems interact with complex environments as
soon as possible.
 Modeling and Simulation (M&S) allows early integration of the
system and its environment.
 Can use physics-based codes to generate solutions that can
be plugged directly into war games of flight simulators.
Key Take-Aways:
o Do not blame expanding development cycles entirely on system
complexity.
 Don’t exacerbate the impacts of system complexity on development
cycles by the use of bad architecture, processes, poor
accountability, or inadequate capacity.
o Understand the difference between complicated and complex, and know
how to treat each one.
Ming Chang, Lockheed Martin Fellow, Lockheed Martin Corporation: Complexity
from the Defense Original Equipment Manufacturer (OEM) Perspective
Theme: This presentation outlines the most essential elements of successful
Verification and Validation (V&V) of complex systems from the perspective of an original
equipment manufacturer of military aerospace systems.
 Successful development is dependent upon
o Understanding requirements
o Feasible design
o Early Identification of risks
 Removal of defects early is essential to maintaining lower life-cycle costs.
 Perform V&V in all phases of the development, at all Technology Readiness
Levels (TRLs).
4





V&V of various systems and disciplines in complex systems are contrasted
Flight safety is foremost, a cradle-to-grave culture.
Validation is a continuing process using wind tunnels (WTs), structural models,
etc.
Verification is a real-time process with processor-In-the-loop (PIL) / human-inthe-loop (HIL) /system-in-the-loop (SIL) simulation.
Key Take-Aways:
o Processes matter
 Processes differ among types of systems or phases of
development.
o Early V&V is essential, continue through all phases.
o Early dependence on legacy systems can lead to complexity creep as
system matures.
Barry King, Director, Space Test & Operations, Dynetics, Inc.: Integration & Test
of Complex Programs (Commercial Perspective)
Theme: This presentation outlines the most essential elements of successful V&V of
complex systems from the perspective of a manufacturer of commercial aerospace
systems.
 Program integration requires good situational awareness of the who-what-whenwhere-how-why of the program life cycle.
o Frequently don’t plan well enough for later stages.
 Program integration roadmap is a combination of those of the Department of
Defense (DoD) and NASA
o Some documentation eliminated.
 Stakeholder needs, goals, and objectives (NGOs) determine what needs to be
done.
o Key starting point for program and Level 1 requirements.
 System engineers and test engineers are link from the outset.
o Relationships mapped early for systematic execution.
o Early test integration averts systems being “thrown over the wall” to test.
 Key Take-Aways:
o In order to have a successful program, all levels of requirements must be
linked and verifiable along the way
 Analysis, model or test
o Most common mistakes with greatest impacts:
 No base line and/or fluid requirements;
 Integration and test personnel not on design team;
 Allowing design engineers to be involved too long;
 Too little time allowed for testing:
5

35% of the schedule for integrated test operations ITO
following 65% for design is inadequate;
 Processes or procedures, rather than experience, are relied on as
the basis of discipline and completeness.
o Include a recent graduate on project teams to question “dumb” rules and
point to ways to “fix” procedures.
Tom Irvine, Deputy Associate Administrator, National Aeronautics and Space
Administration (NASA) Headquarters, Aeronautics Research Mission Directorate:
Complexity and the Research Community
Theme: This presentation outlines the most essential elements of successful V&V of
complex systems from the perspective of the research community.
 Observation of natural complex systems is instructive in understanding
engineered complex systems.
o Used the kelp tank at the Monterrey Aquarium as an example of a natural
complex system.
 There are similarities and differences in natural and engineered complex systems
identified in the presentation.
o Both natural and engineered complex systems:
 Have dynamic environments that are constantly changing and
adapting to current conditions
 Have interdependent parts and outcomes which are not always
predictable
 Require a holistic, collaborative approach
 It is difficult to see the whole but rather only what’s available
from your vantage point
 Are complex systems that were grown and evolved over time and
were not constructed all at one time.
o Natural and complex systems differ in that:
 A natural system is a chaotic environment where life and death are
certainties.
 Chaos is normally unwelcome in engineered systems or systems of
systems.
 The natural system is a continuous experiment during all phases of
its life cycle.
 The engineered system or systems of systems must effect
purposeful integration, and test and evaluation.
 Understanding of the interdependencies and outcomes by external observers is
not required in the natural complex system; it simply evolves according to a
natural order.
6


o In the engineered complex system, we must decompose it into parts we
can understand in order to positively affect design, development, test,
evaluation and operations.
 This decomposition often leads to sub-optimization.
Referring to the SE “V” diagram, the decomposition and definition process
usually works well.
o Re-composition and integration is the difficult part and is where we usually
fall short.
 Research and Development (R&D) (both foundational and focused)
is greatly affected by this.
 R&D is symbiotic with integration, test, evaluation, verification, and
validation.
 R&D may be either the developer or the user of test and
verification capabilities.
 V&V costs will swamp program costs unless new tools come out of
R&D
Key Take-Aways:
o Emulate, whenever possible, the incremental growth and development of
natural complex systems when engineering such systems and systems of
systems.
o Recognize the risk of sub-optimization when decomposing complex
systems for understanding.
o Use R&D to develop and use new test tools to enable affordable and
effective V&V of complex systems and systems of systems.
Ward Johnson, General Manager, Jacobs Technology Group: Planning and
Executing an Integrated Test Strategy for Complex Aerospace Systems (from a
Test and Evaluation [T&E] Infrastructure Perspective)
Theme: This presentation outlines the most essential elements of successful V&V of
complex systems from the perspective of the research community.
 Jacobs Engineering has more than 8,000 people involved in the design,
operation, and stewardship of test facilities worldwide.
o T&E facilities are very expensive and highly technical.
o It takes as long to develop some T&E facilities as it takes to develop the
systems they support.
 Ensuring successful T&E program delivery requires:
o Early and effective up-front understanding with stakeholders
o Team with equipment suppliers and/or other design/build suppliers to
mitigate risk and minimize schedule
 T&E infrastructure challenges in the United States:
7







o Maintaining and improving essential core test capabilities.
o Preserving specialty test capabilities through investment in the T&E
workforce.
o Ensuring enhanced collaboration and cooperation across the T&E
enterprise.
o Capitalizing on simulation and technology in support of evolving integrated
test processes.
Key Take-Aways:
The U. S. test infrastructure is old.
o We have sufficient capability and capacity.
o It is not being properly maintained or modernized.
Need more collaboration during lean budget periods.
Must capitalize on simulation and technology in support of evolving integrated
test processes.
Two questions were posed to industry leaders:
o Are programs more focused on long-term technological advancement than
near-term client-defined safety, reliability, and sustainment?
o Are we properly balancing risk with responsiveness and cost?
Program teams must learn from the past…do not reinvent.
T&E and Facility Teams must:
o Question requirements that come as solutions
o Define the end before you start
Eileen Bjorkman, Chief Technologist, 412 Test Wing, U. S. Air Force: Flight
Testing of Complex Systems: Approaches and Lessons Learned
Theme: This presentation outlines the most essential elements of successful V&V of
complex systems from the perspective of the flight test community.
 Complex systems context
o Security requirements cause some difficulties.
o Complexity exists because of people, processes, policies, technology,
engineering, management, and social sciences.
 Solutions require interdisciplinary approaches.
 Complex systems test challenges
o Reduced budgets
o Pressures to close facilities
o Do more with less; accelerated acquisition timelines.
o Range encroachment (geographic, competing technologies (wind
turbines) and Radio Frequency spectrum encroachment .
o Integrated government /contractor facilities
o Aging workforce.
8





Flight test approaches: Distributed testing
o The B-1 strategic bomber used distributed testing
 Full-up B-1 testing would have required prohibitive resources and
assets
o Short time-line drove Global Hawk to distributed testing.
o Ensure environments are “accredited” when using distributed approach.
Fusion Lessons Learned
o Use building block approach
 Understand how individual systems work
o Plan for right assets and ensure they are fully functional, anticipate
problems, build in flexibility, identify key objectives and focus efforts to
ensure success in those areas
We are drowning in data; eliminate unnecessary data.
Simpler may be better.
o Exercise critical functions in less complex scenarios when able.
o “Exercising everything” early may create more questions than answers.
o Develop confidence in the system before engaging complex scenarios.
Key Take-Aways:
o Use what we have; repurpose, recycle, reuse, rely on others.
o Complex systems may require new skill sets.
o Complex systems may require multiple program offices.
o Need to understand distributed M&S.
 A “discipline” engineer with a Master’s in SE is the best combination.
George Rumford, Deputy Director, Project Development, Department of Defense
Test Resource Management Center: Planning and Executing an Integration Test
Strategy for a Complex Aerospace System
Theme: This presentation described the DoD’s Test Resource Management Center’s
(TRMC’s) structure, its Congressionally-mandated mission for DoD test infrastructure
oversight, including its relatively-recently assigned responsibility for the Joint Mission
Environment Test Capability (JMETC) Program and the National Cyber Range (NCR).
 The briefing contains organizational charts and mission statements for TRMC.
 The traditional TRMC mission of range oversight is established under Section
231 of the “Bob Stump” NDAA for FY03 (PL107-314).
 Responsibilities for JMETC and NCR were established in 2005 and 2012,
respectively.
 Cyberspace vulnerabilities exist in DoD weapons systems
o The DoD has inadequacies in its cyber range capability
 Inadequate environments
9

 Costly and time-consuming to build a federated cyberspace
environment
 Participant stovepipes delay integration of cyberspace capabilities
o Realistic cyber environments are needed.
 Must determine whether systems can fight through a denial-ofservice attack and still be responsive to the warfighter.
 Cyber has recently become more complex.
o The NCR will represent :
 A persistent, operationally realistic cyberspace environment with:
 Interoperability Standards that break down “stove pipes”
 Rapidly integrated Live, Virtual, & Constructive capabilities
 Common test & experimentation tools and applications
o In terms of the SE “V” diagram, the NCR will:
 Identify cyberspace system and sub-system dependencies
(decomposition side)
 Test systems of systems mitigation of cyberspace threats
(recomposition/V&V side)
Key Take-Aways:
o Tenets of “good” government and industry systems integration testing are:
 Derives from mission-focused requirements & test plans
 Combines a tiered management structure & accountability
 Uses agile development concepts
 Leverages existing government and industry test capabilities
 Employs interoperability standards that enable rapidly integrated
live, virtual, & constructive capabilities
 Shares common test & experimentation tools and applications
 Unifies approach in conducting both cyberspace and “traditional”
testing
 Applies effective knowledge management techniques & structures
Phil Stich, Deputy General Manager, ATA, Arnold Engineering Development
Complex, Session 1 Chair: Threads from Track 2, Session 1
The following is a summary of take-aways presented by session chair, Phil Stich, to the
Track 2 chairs at the evening summary meeting following Session 1:
 Requirements fidelity and stability
o Spend more time up front with analysis of alternatives (AOA) before
proceeding
o Beware of requirements that come as solutions
 Acquisition process
10

o Must agree that our current process is cumbersome, especially for military
advanced development projects.
o Commercial aircraft uses more streamlined process
Integration of complex systems is very difficult
o Subsystem test methods can give wrong results – or incomplete picture
o Fused data – flight test example
11
Day 2
CASE Track 2, Session 2: Integration of Modeling and Simulation, Ground Test,
and Flight Test
This session was chaired by George Sydnor, NASA Langley Research Center, and
Terrence Trepal, Institute for Defense Analyses (IDA). The session moderator was Mark
Melanson, Lockheed Martin Corporation. Panelists and speakers are identified below
with their individual presentations.
Tim Marshall, Director, Aeronautics Test Program, NASA Aeronautics Mission
Research Directorate: Integration of Modeling and Simulation, Ground Test, and
Flight Test
Theme: This presentation provided an overview of the mission and strategies of
NASA’s Aeronautics Test Program (ATP) and the Aeronautics Research Mission
Directorate (ARMD) of which it is an important part. Included were observations
stemming from NASA’s experience in integrating complex systems.
 ARMD’s programs have many interfaces.
o Most errors and innovations in complex aerospace systems development
occur at program interfaces.
 ATP is the ground test and flight test element of ARMD.
o ATP provides the underpinning for the four research programs of ARMD.
 Provides testing for three of the four.
 ATP’s mission is to support NASA in every way possible:
o Provides strategic management guidance and recommendation to the
NASA ARMD and Centers with respect to the ATP portfolio.
 Basis for ARMD decisions to close or maintain facilities.
o Represents NASA and the nation’s interests for aeronautics testing.
 40% to 50% of ATP testing is for NASA; 15% to 20% is for DoD;
remainder is other external customers through Space Act
agreements.
o Provides strategic direction to capability managers across the portfolio.
 Sometimes recommends reliance on non-ATP assets.
o Provides financial support to sustain and enhance test facility capabilities
and related workforce.
 Must balance sustainment with new capability.
 ATP’s investment strategies are to enhance capability (higher reliability,
relevance, etc., therefore higher value) at reduced operational cost (lower cost to
users).
o “Value sweet spot” graph was shown: A region on the Cost vs. Capability
map that is considered the target for any given capability (See briefing).
12



o Capabilities operating outside the boundaries of the “sweet spot” are
sought to become compliant by:
 Improving capability at constant operating cost.
 Lowering cost for a given capability.
 Or some combination of the two.
Challenges:
o Lack of rigor in planning a test; poor estimating by both the developer and
the provider.
o Lack of engagement between service providers and developers.
 Best way to ensure success is early and frequent communication
with the test providers.
Can/should the providers provide integration services for M&S, ground test and
flight test, or is it the responsibility of the developer to determine the tools to use?
o Perhaps the provider can have the tools available and offer the
capabilities.
Key Take-Aways:
o Improve the value of capabilities to customers.
 Stay engaged with customer needs.
o Leverage investments for maximum benefit.
o “Teach” customers about capabilities
 Early interaction is critical.
 Helps streamline the integration of Ground Test (GT), Flight Test
(FT), and M&S.
 Incomplete early planning often leads to trouble.
Tom Fetterhoff, Technical Director, Test Division, Arnold Engineering
Development Complex: Arnold Engineering Development Complex (AEDC)
Theme: This presentation discusses the use of integrated test and evaluation at AEDC
and how AEDC seeks to better integrate with FT.
 The new Air Force Materiel Command (AFMC) “Test Center” organization
combined GT and FT complexes.
o Seeks better integration of testing tools.
o Goal is lower test cost and higher quality solutions.
 AEDC has used integrated test and evaluation (IT&E) for many years.
o M&S enables better insight into data obtained in GT and FT
o The use of M&S integrated with GT in several programs was discussed.
 Examples included F-15, F-22, B-1, F-101 engine.
 Disciplines in examples included store separation, inlet
performance, engine repair.
13








Store separation has moved toward more M&S, less GT and
FT.
AEDC works to expand contribution of M&S to early program planning (during
the Analysis of Alternatives [AoA] phase)
o Today WTs provide high-fidelity data faster than computational fluid
dynamics (CFD); this could change in the future.
AEDC seeks to provide customers with information, or knowledge, not just data.
o Audience comment: Customer is still responsible for the design and
development, and might not want all the help that is being offered.
AEDC’s space chamber work that supports the Missile Defense Agency is very
robust and growing in the sensor testing area where IT&E is beginning to be
utilized more.
AEDC integrates M&S, GT data, and FT data to develop a plume signature data
base for all rockets..
Hypersonics requires the use of Test and Evaluation (T&E) and Science and
Technology (S&T) to develop tools and techniques to support future systems.
Recent changes to DoD 5000 series regulations requires early communications
o This will drive testers and users to work more closely together.
o Will help IT&E methodology work better.
Key Take-Aways:
o Purely experimental V&V is no longer viable.
o M&S has matured to the point that it is capable of offloading testing to
varying degrees.
o Early interactions between customers and test professionals enable
better, faster, cheaper solutions.
o Effective IT&E early can facilitate/enable streamlining FT.
o Stakeholder feedback enhances AEDC capability.
George Eitelberg, Director, German Dutch Wind Tunnels (DNW): Integration of
services by an independent service provider
Theme: The presentation discusses the culture and challenges of the independent test
provider and how the German-Dutch Wind Tunnels (DNW) support the integration of
T&E services with its customers.
 DNW is an independent provider of T&E services, supporting research (15%),
military test (40%, of which half is transport), and civil (45%).
o DNW’s product is reliable data.
 Workload is uneven/highly volatile.
o Heavy usage in some years and light usage in others can lead to looking
for other areas of expertise.
 A jack-of-all-trades approach can lead to poor support
14




 Specialists are needed in all areas; one person cannot cover
multiple disciplines well
 Horizontal integration can alleviate pressure, but may lead to
scheduling conflicts
 If you redeploy staff into other disciplines, you will usually not get
them back.
 DNW knows where to find specialists when needed.
 Audience: AEDC does a good job of bringing all tools
together; Lockheed-Martin (L-M) used their services on the
F-35.
DNW integrates with the research community
o The capabilities and limitations of numeric and wind tunnel simulations
need to be understood
o Universities assist with methodologies for IT&E on development programs
o GT is not properly taught; should be thought of as “simulation of flight.”
Network with customers to understand their processes and future needs
o Example: Two problems remain in civil aeronautics: Noise (aeroacoustics) and propulsion integration (fuel consumption).
Maintenance is managed by internal DNW staff, but it is outsourced as much as
possible.
o Provides flexibility.
Key Take-Aways:
o Independent providers don’t have to be politically correct…just correct.
o A jack-of-all-trades is a master of none.
 DNW does not provide one-stop shopping.
o If operational cost is a concern, expertise is endangered.
o IT&E methodology needs stability to be effective
 This is difficult because it is a project-driven process.
 Support from research organizations can help solve the problem.
o Independent service providers must depend to some extent on
institutionally-funded sources for development.
o Retain flexibility to enable optimum contribution in each area of expertise.
Andy Garrell, Technical Director, Aerospace Testing Manager – Transonic Wind
Tunnel, Calspan: Calspan – A Provider’s Perspective
Theme: This presentation discussed Calspan as an independent test service provider
with one wind tunnel, striving to incorporate new technologies to improve results and
make usage more efficient.
 Technological advancements have affected Calspan’s service area contributions
o Improved efficiencies, data quality and operational approaches
15






o Resultant reduced usage has made sustainable utilization more of a
challenge.
 Lower usage leads to higher unit costs because fixed costs remain.
o Calspan’s continual improvement program has led to new technology
advancements.
 Primarily in computer automation and CFD applications
Integration of M&S/GT/FT is not happening quickly at Calspan
o Attributed to Calspan’s small, independent status
o They never see the user’s M&S people…only GT people.
o Integration with M&S or FT is considered the customer’s responsibility.
For maximum success, developers should emphasize:
o Quality physical models brought to the WT.
o Interaction between M&S and GT providers
 Regularly include CFD person(s) in on-site ground tests
Shortfalls that exist in M&S and GT can be offset be each discipline’s
counterpart.
o Mesh M&S and GT early and often; integrate the program teams.
o Eliminate competition between M&S and GT communities.
Areas for improvement:
o Quality of the test article.
o Involve CFD with GT.
o M&S and GT can each be strengthened through cooperation.
User issues:
o Lack of planning
o Timeliness of planning
o Lack of coordination with the test article development and the test facility.
Key Take-Aways:
o Small size and independent status inhibit major integration of new
technologies and T&E disciplines
o Major efficiency improvements create a challenge and will drive the unit
cost of testing up.
o Innovation is difficult to implement with older people. (Based on a question
from the audience.)
 Older people rely on what has been successful for them in the past.
Bryan Herdlick, Senior Systems Engineer and Project Manager, Johns
Hopkins University / Applied Physics Laboratory: SoS-based Capability
Development Characterizing Performance Through Integrated M&S and
T&E…
Theme: In the area of integrated testing, the Applied Physics Laboratory (APL)
sometimes serves as a “trusted agent” for the government, much like a Federally
16
Funded Research and Development Center. This presentation discusses APL’s
integration of M&S with WT and FT for the verification, validation and accreditation
(VV&A) of systems of systems (SoS).
 APL’s mission is to solve complex research, engineering and analytical problems
that present critical challenges to our nation.
 SoS testing is outside the comfort zone of conventional IT&E
o Multiple platforms, weapons, networks require operators in the loop
o M&S is integrated with GT and FT to augment live T&E
o Existing DoD IT&E capabilities don’t handle SoS well
 “Ideal” organization for SoS testing would address:
o Use of live, virtual, and constructive (LVC) environments, chronologically:
 Constituent system testing
 Integration and functional-level “testing”
 Full integration and capability-level “testing” composite capability
o Integration of M&S is essential due to expense, scheduling, and operatorin-the-loop (OITL) considerations of SoS testing
 FT of SoS is often untenable.
 Must characterize SoS capability vs. testing to a specification.
 SE approach using “federations” of models is used to address SoS capability
development.
o Some models not as rigorous as they should be
o Models from various programs must work together
 Some elements of models not tested by individual programs
o Models found lacking must be challenged up front
o Operator-in-the-loop is the ultimate proof
 Key Take-Aways:
o Establishing trust in SoS testing is difficult.
o Must apply sound SE methodologies to SoS V&V to mitigate risk.
o Enhancing M&S to support T&E in SoS is a challenge.
o Prefer more V&V in high level architecture (HLA) federation development
guidance.
o Virtual and constructive are not well-integrated
o Live testing is often difficult for SoS
o OITL in SoS testing is a “must-have,” as early as possible.
Jay Dryer, Director, Fundamental Aeronautics Program, NASA Aeronautics
Research Mission Directorate: NASA – Integration of Modeling and Simulation,
Ground Test, and Flight Test
Theme: This presentation describes NASA’s approach to the integration of testing
services and steps they are taking to overcome perceived shortfalls.
 NASA’s Fundamental Aeronautics Program (FAP) exists to conduct fundamental
research that will generate innovative concepts, tools, technologies and
knowledge to enable revolutionary advances for a wide range of air vehicles.
17




o The FAP develops and provides knowledge, tools and technologies to
enable others to develop advanced vehicles.
o FAP integrates testing into its research by working closely with providers
FAP is undergoing or facilitating changes:
o Increased emphasis on high-fidelity simulators
o Growth in computational capabilities
 Continued growth may require new architectures
o More FT in fundamental research
o Merging Research & Technology (R&T) and T&E capabilities is expected
FAP is improving its performance in two key areas:
o Risk mitigation and requirements development
 Develop requirements early, avoid creep
 Communicate!
 Take risks early on to avoid bigger risk down the road
 Ensure that the “integration” aspect amongst simulation, ground
and flight test is a part of the requirements phase
 Be creative with requirements
 Example: It may be better to invoke FT earlier to help inform
the development of other capabilities
Shortfalls in M&S, GT, and FT services were discussed and are being dealt with
o One recurring theme of note was that impact from improved coordination
of M&S with ground and flight experiments has resulted in more efficient
testing.
 This fact, along with reductions in the number of programs, creates
a financial strain on facilities that also affects user costs.
Key Take-Aways:
o Need to better integrate fundamental research into programs and test
capabilities
o Sustainable resource models for test facilities and ranges must be
implemented
Barry Lakinsmith, Deputy Director, Army Aeroflightdynamics Laboratory, U. S.
Army Aviation and Missile Research, Development, and Engineering Center:
Army / Rotary Wing Vehicle Perspective
Theme: This presentation focused on the unique challenges of rotary wing T&E.
 The rotary wing community uses M&S, GT, and FT
o Cross-specialization of Army personnel through partnerships with NASA
and the Air Force is needed
 Many rotary wing programs are not successful.
o Better IT&E is needed to assure success.
 Traditional testing (small-scale and full-scale WT and FT) has not predicted
helicopter aeromechanics and flight control needs well.
18




o In a CV22 fuel dump example, CFD was a better predictor of the actual
aerodynamic phenomena than was a wind tunnel.
CV22 is manageable; helicopter modeling is more difficult, but improving.
o Coupling rotor Computational Structural Dynamics (CSD) with CFD gets
within 2% of flight.
o Rotor systems are very complicated, might be years before we can
properly model
o Gathering small-scale WT, full-scale WT, and flight data to develop codes
to predict rotary wing performance.
Improved tools are needed to support Future Vertical Lift (FVL) initiative
o Existing tools might be made to work with time and resources
Audience: Rotary wing safety record would not be tolerated in civil aviation.
o Rotorcraft fly close to the ground
o Many accidents are caused by human error.
o Briefer: Doesn’t think physics is the problem.
Key Take-Aways:
o Improved codes are needed to eliminate need to over-design.
o Must have multiple tools and good specialist engineers in each discipline.
 Integration specialists are also needed.
o Computational power is limiting.
 We can compute one rotor revolution per day; we need to compute
one revolution per hour.
o Systems are coming that will demand capabilities to model even more
complexity.
John Curry, Director, Spacecraft Advanced Development, Sierra Nevada
Corporation: Integration of Modeling and Simulation, Ground Test, and Flight
Test in the Dream Chaser Program
Theme: This presentation described the integration of M&S, GT, and FT from Sierra
Nevada Corporation’s user perspective, using their Dream Chaser program as the
example.
 Dream Chaser is a complex system with a specific objective: Build and fly a crew
space transportation system using lifting body design that can achieve Low Earth
Orbit cost-effectively.
o Reverse –engineered Langley Research Center HL-20 design
 Enabled improved fidelity where needed.
o M&S is being used extensively to build data base.
 Cheaper, but adds risk
 Some areas of the flight regime must be done only with M&S and
accept FT risk.
o Shroud-less design was used to eliminate complexity in abort phase.
19

 WT used to demonstrate that design without shroud is feasible.
 Low budget requires WT to be correct
o A big challenge in GT is whether the model is exactly what flies.
 If not, what problems are introduced by the differences?
o Analysis is now complete; now doing helicopter drop tests.
 Moving to more complex parts
o Cannot accept low TRLs; all parts must have flown before.
Key Take-Aways:
o Requirements creep hurts the program.
o Not all great ideas are requirements.
o A simple fly-off would be best.
o Use experienced people.
 You don’t know what you don’t know.
o Often spend too much time on contingencies and not enough on nominal
situations.
 Accept some risk and/or limited understanding and move on.
o Use actual or historical data to estimate mass in launch vehicles. Mass is
critical!
o When faced with less funding, do less and accept risk.
 Explore how things can be done rather than “can’t do.”
o Collaborate with NASA, but don’t accept too much oversight.
Mark Melanson, Lockheed Martin Corporation, Session 2 Moderator: Closing
Comments for Track 2, Session 2
 Integration of the various tools for V&V is the required future state
o Specialization must be maintained
 Need computational tools to be more synergistic in matching WT data.
 Should AIAA host a workshop for the three communities to map out a strategy?
o Audience comment: DoD has ongoing Computational Research and
Engineering Acquisition Tools and Environments (CREATE) program to
develop and deploy computational engineering tool sets for acquisition
engineers.
20
Day 2 (Continued)
CASE Track 2, Session 3: Verification and Validation Issues
This session was chaired by Ron Kohl, R. J. Kohl & Associates, (Moderator) and Misty
Davies, NASA Ames Research Center. Panelists and speakers are identified below with
their individual presentations. Kohl indicated that a session report separate from this
one will be provided.
 A listing of references (standards, best practices, guidebooks, etc.) related to
V&V or Integration and Test (I&T) was distributed. It is provided at the end of this
section of this report.
Invited Speakers
Wilson Felder, Director, William J. Hughes Technical Center, Federal Aviatrion
Administration (FAA): Challenges in Testing NextGen
Theme: NextGen is a comprehensive initiative that integrates new and existing
technologies, procedures and policies for the transformation of our National Airspace
System (NAS), making it flexible and sustainable. This presentation provided insights as
to the challenges of testing such a complex system.
 NextGen is a comprehensive system with new and existing technologies,
procedures, and policies.
o It involves many people and seven U.S. Government agencies.
 Navigational performance/area navigation, dependent surveillance, digital
communications, and 4-D trajectories are all new paradigms.
 It is being built in pieces and layers.
 There are dependencies on avionics, communication systems, and other
elements in the aircraft that cannot be brought into a laboratory.
 NextGen is a complex system that must be thoroughly tested before
implementation, and must be shown to be safe for future systems.
 Key Take-Aways:
o LABNET created that links all relevant systems as an assessment
platform for complex systems-of-systems.
o Using “come-as-you-are” strategy to test interfaces with whatever enters
the system.
o Removes stovepiped laboratories and allows one integrated toolset.
Mat French, Electrical Systems Engineer, Rolls Royce, Co-Chair, AIAA
Communication and Membership: Aerospace System Integration Working Group
(ASI-WG)
21
Theme: AIAA is creating a working group to promote and contribute to aerospace
system integration (ASI) across the spectrum of applications ranging from traditional
systems to complex systems and systems of systems.
 The Working Group (WG) will be implemented in a “crawl-walk-run” process
beginning in 2013.
 The topic is very broad and cuts across almost all AIAA Technical Committees
(TCs), WGs, and Program Committees (PCs).
o Integration from a system design aspect
o It will deal with growing simple systems to systems of systems
 Publications and conferences will be the main products
o Possibly a joint journal with the Systems Engineering Technical
Committee
o Working on an Aerospace Systems Integration (ASI) Guide.
 Significant details on the WG’s charter, activities, relationship with other
committees, etc., are presented in the briefing.
 Audience comments/questions:
o Why is SE increasing in importance? How does SE verification differ from
testing?
 Look at risks specifically associated with system integration.
o System integration tasks are universally applicable, regardless of scale.
 Scale only makes it more complicated.
 Key Take-Aways:
o Systems Integration is a foundational element of SE
o This WG should help to link committees that have integration within their
charter.
o Formational activities are ongoing. Looking for members and contributors.
 Contact information is given in the briefing.
Donald Firesmith, Senior Tecfhnical Staff, Software Engineeroing Institute,
Carnegie Mellon University: Common Testing Problems: Pitfalls to Prevent and
Mitigate
Theme: The briefing attempts to capture and organize a high-level summary of
commonly-occurring testing problems, make general recommendations as to how to
avoid/mitigate these problems, and provide the information needed to generate testing
oversight and assessment checklists.
 Problems are characterized in the following categories:
o General testing problems
o Test planning problems
o Modern life-cycle problems
o Requirements and testing problems
22


o Unit testing problems
o Integration testing problems
o Specialty engineering testing
o System testing problems
o Systems-of-systems testing problems
o Regression testing problems
o Maintenance testing problems
An extensive list of recommendations is provided in the presentation slides.
Key Take-Aways:
o Root causes of most problems relate to :
 Lack of adequate planning, preparations, or definitions
 Resource limitations
 Turf / rice bowl disputes
 Missing information from poorly-thought-out programs
Panel Session
Maureen Molz, Manager, Concept Development and Validation Branch, FAA:
System of System Verification & Validation for NextGen
Theme: NextGen represents a fundamental paradigm shift from stove-piped, analog,
point-to-point systems to an integrated, digital, net-centric architecture. This briefing
seeks to describe a cost-effective approach to testing the highly complex NAS system
that is constantly in use and can’t be turned off.
 Traditionally, 70% of faults in a complex system are introduced in the design
phases (downward leg of the SE “V” where NextGen is decomposed) and only
3.5 percent are found and fixed.
o The remainder are dealt with after recomposition at significantly higher
cost.
 Key Take-Aways:
o There is value in using simulation to test NextGen.
 Using live, virtual and constructive models.
 Low-, medium-, and high-fidelity
o Test entire NAS as a system-of-systems
 Influence research, development and test
o Evaluate in realistic/intended environment
Kevin Knudsen, Boeing Test & Evaluation: System-of-Systems and Live, Virtual,
Constructive Test Capability - Global Capabilities
Theme: This presentation describes Boeing’s application of LVC test methodology early
in system design to mitigate problems that occur downstream.
23




Historically Boeing has stovepiped SE, T&E, and M&S
o Realized that these must come together to facilitate early V&V
Boeing has initiated a gated approach for its V&V enterprise to identify, examine,
and mitigate risks early and throughout the process.
o Cross functionally ensure that the concepts, requirements, architectures,
designs, and operations are affordable, feasible, valid, producible, and
testable across the life cycle
o Perform verification and validation as soon as possible to identify,
mitigate, and retire program risks early
Boeing has created a global LVC-test infrastructure for LVC experimentation and
test methodology.
o Boeing sites worldwide are on LABNET.
o A single T&E organization supports military and commercial programs.
Key Take-Aways:
o Industry must revisit the approach to V&V of complex systems/systems of
systems.
o Early and persistent, cross-functional engagement across a SOS life cycle
is required.
o Leveraging opportunities for injecting downstream issues of a prototype
system into a controlled, complex SOS Test environment earlier in the life
cycle helps identify and mitigate program risks throughout the life cycle.
Misty Davies, Research Computer Engineer, Intelligent Systems Division, NASA
Ames Research Center: Assurance of Software-Intensive Flight Critical Systems –
A Plan for Enabling V&V in NextGen
Theme: This presentation discusses the plan for applying V&V in NextGen.
 80% of a pilot’s functionality is software-based.
o 75% of the cost of a new aircraft is software.
o Traditionally we underestimate that cost.
 For software-intensive systems…
o Lines of code have doubled almost every four years since 1968.
o Software defects increased 15% from ’97-’98 to 2000.
o The cost to fix software deficiencies in the maintenance stage is about 110
times what it costs in the requirements stage.
 64% of deficiencies are introduced in the requirements or design
stage, but few are corrected there.
o We have no good way to look at distributed systems that are software
intensive.
 Key Take-Away:
24
o The key to maintaining safety in NextGen while reducing the cost of V&V
is to push V&V earlier in the lifecycle and use advanced complex system
V&V tools and processes.
Eric Neiderman, Human Factors Branch Manager, FAA: Human Factors of
Integration, Test, and Verification of Complex Systems
Theme: This presentation explored the issue of ensuring that human factors issues are
identified and resolved in complex systems.
 Human factors considerations are usability, trainability, and maintainability.
 Desirable to test human factors in unusual, off-nominal events.
o Understand the role and function of the person in rare, abnormal, unusual,
emerging situations.
 Human factors issues can best be understood through the use of…
o Tools
 Measurement, cognitive agents, and simulation capabilities
o Opportunities
 Human factors long-term R&D focus areas
 System resiliency
 Complexity
 Information
 Human-systems integration
 Safety
o Processes
 Evaluate the system in less than ideal situations and
circumstances.
o People
 Involve all disciplines
o Strategy
 Develop both short and long-term strategies in all areas of tools,
opportunities, processes, and people.
 Audience interaction:
o CASE has been used during the week as a place to rant about decisionmakers who don’t want to hear about SoS LVC testing in distributed
networks.
 Institute a mechanism for constructive action.
o Went for International Organization for Standardization (ISO) certification
on NextGen test procedures.
o How do you V&V systems early enough to make changes soon enough?
 Use a business case to convince decision-makers that there is
value in testing earlier.
25

 Need data to make business case. Must document better.
o Organizational structures are based on old models. Not agile enough.
Key Take-Away:
o Human factors can be systematically identified and resolved in complex
systems.
Group discussion in closing T2S3:
Statements below came from both panelists and members of the audience. No personal
attribution was consistently recorded.
 There has been a lot of complaining that decision-makers don’t want to consider
the use of SOS testing in a distributed environment.
o Perhaps CASE will provide a forum for more constructive action.
 We need to collect the data to document benefits of early V&V when we do it.
o Make the business case.
 For agile systems, the technical problems can be solved. Organizational
structures, processes, policies, etc., need to be changed.
o E.g., eliminate functional stove-piping
o Our organizational structures are antiquated.
o Not agile enough.
References (standards, best practices, guidebooks, etc.) related to V&V or I&T as
referenced in the introduction to this section.
 AIAA 117 Space Systems V&V
 1012-2012, IEEE Standard for System and Software Verification and Validation;
2012: http://standards.ieee.org/findstds/standard/1012-2012.html
 NASA IV&V Policy NPG 8730 DRAFT
 FAA AMS Policy for
V&V: http://fasteditapp.faa.gov/ams/do_action?do_action=LinkSection&contentU
ID=4&sectionNumber=2.1.7
 FAA V&V
Toolkit: https://employees.faa.gov/org/linebusiness/ato/operations/technical_ope
rations/best_practices/discipline/evaluation/
 FAA V&V Guidelines, October
2011: http://fast.faa.gov/docs/vandvguidelines.doc
 FAA T&E Process Guidelines, March
2012: http://fast.faa.gov/docs/teguidelines.doc
 FAA T&E Handbook, August
2010: http://www.faa.gov/about/office_org/headquarters_offices/ang/offices/tc/ini
tiatives/vnv/documents/publications/VVSPT-A2-PDD013_TnE_Handbook_v2.0.pdf
26



AIR FORCE INSTRUCTION 99-103, CAPABILITIES-BASED TEST AND
EVALUATION
DAU’s TEST AND EVALUATION MANAGEMENT GUIDE, JANUARY 2005
Documents that contain V&V/I&T ‘best practices’ information
o ISO 15288
o ISO/IEEE 12207
o NASA NPG 2820
o NASA Systems Engineering Handbook (6105)
o CMMI
o Mil Std 499B
o DAU Systems Engineering Fundamentals Guidebook
o DAU Defense Acquisition Guide
27
Day 3
CASE Track 2, Session 4: Lessons Learned in Integration, Test, and Verification
This session was chaired by David Dress, NASA Langley Research Center (Moderator)
and Steve Chan, NASA Johnson Research Center. There were five panelists, identified
below with their individual presentations.
Marshall Smith, Mission/Flight Test Strategy Lead for Exploration Systems
Development Division, NASA Headquarters: Ares I-X Lessons Learned Integration, Test and Verification
Theme: ARES I-X was a fast-paced program to provide early source data for NASA’s
ARES I vehicle, using resources from across the agency, to discover integration,
assembly, and test issues for ARES; provide a realistic simulation of the Ares
environments and flight control strategy; and provide flight validation of integrated aero,
structures, and performance models.
 Lessons-learned were discussed in four separate theme categories:
o Mission management
 Concentrated leadership/authority
 Schedule is king
 Minimize levels and boards – high decision velocity
 Make decisions quickly and live with them
 Documents and process are not the focus
o Test mindset – Enforce “good-enough” rationale
 Question standards, policies, procedures
 Developed simple alternatives (e.g., modal tests)
o Systems Engineering and Integration (SE&I)
 Objective and goal focused - question requirements and standards
 Small competent teams composed of elements and led by SE&I
 Tiger teams formed and dissolved as necessary
o Heritage hardware and facilities
 Don’t assume heritage will work with less effort
 Atlas Systems Integration Laboratory worked well for evaluating
heritage hardware in new environments.
 Key Take-Aways included:
o Make decisions when you have sufficient data; don’t wait for all of the data
o Strive for cheaper, faster, good enough.
o Make requirements subordinate to goals.
o Heritage doesn’t always work; it is a place to start.
28
Frank Rasor, Director, Flight Test Operations, Boeing (787 & 747): Product
Validation and Recent Flight Test Experiences
Theme: Lessons-learned were presented from two ongoing Boeing programs: 787 and
747-8. Each flight test program was expected to take 10 months. Each one took 21
months to complete, causing expensive retrofits to airplanes already on the ramp. This
presentation explored some of the reasons why.
 In static tests of the 787 structure, the wings which flexed 25 feet at the tips initially
showed no stress at the wing-body juncture. This was missed in instrumenting the
test article.
 In the 747-8, some of the same oscillations that were seen as noise and accepted in
older versions had to be eliminated because of new regulations.
o Landing gear doors were causing turbulence that created oscillation.
 Heavier aileron actuators had a buzz
 New materials were required to take gross weight to 1,005,000 lb.
o If a materials allowable test was missed, they pressed ahead
o They paid a price for this later in flight testing
 Key Take-Aways:
o Finish component tests before flight testing
o Program managers sometimes make bad decisions that cause problems for
subsequent PMs.
o More ground testing would have resulted in less flight testing.
o Referring to the Verification and Validation “V,” the way you arrive at and
manage the low point of the “V” influences how efficiently you move up the
right-hand-side with test.
John Muratore, Director, Mission Assurance, Space X (Falcon 9 and Dragon):
System Engineering: A Traditional Discipline in a Non-traditional Organization
Theme: Space X is a small company of 1800 people, most located in Hawthorne, CA
under one roof. They are developing several versions of Falcon launch vehicles and the
Dragon spacecraft. This presentation described the unique approach to SE in Falcon
V&V.
 Space X uses “iterative design.”
o Maintain continuous design heritage in development with rapid spiral
methodology.
o Huge development risk on the way down the “V,” rigorous SE on the way
back up.
o Rapid design-build-test cycles to inform design by experience.
o “Test like you fly, test what you fly.”
 Key Take-Aways:
o Space X’s innovative success is facilitated by its small size and relatively
small cost of systems.
o Rapid spiral development depends on applying lessons-learned.
 Immediate redesign when tests reveal problems enable program to
advance rapidly.
29
o People are better at solving problems than predicting them.
 Up front SE is balanced with learning through rapid spiral
development.
o The process depends upon rapid, constant communications among team
members; e-mails are answered immediately.
o Designing to satisfy the needs of multiple customers.
 Flexible design parameters to satisfy multiple mission needs.
o Maintain total control over what is built in-house.
 Multi-element optimization down to the last part.
o Space X uses a traditional test hierarchy, including in-space testing.
 Facilities were low-cost and were built in a very short time.
o It is difficult to build a creative high performance engineering culture.
o Too much organization, and too many rules and processes, can easily ruin
creativity and performance.
o SpaceX is achieving a good balance of creativity and systems engineering
for agility and affordability.
Brandon Rhatigan, Director, Engineering & Test Operations, F-35 Integration test
Force, Lockheed Martin: F-35 Lessons Learned in Integration and Test
Theme: The F-35 has 24.3 million lines of code (LOC) compared to other aircraft
averaging 9.4 million. This leads to increased complexity in integration and support.
This paper presented some of the lessons learned in testing the F-35.
 Test robustly, early and often.
o Data are presented for multiple programs that show increased lower-cost
ground testing early actually reduced higher-cost flight testing later.
 Employed “Fusion Testing”
o F-35 has an overwhelming amount of sensor data; too much for the pilot
to process individually
o F-35 invested heavily in labs and test beds.
o Fusion combines sensor data into usable information for the pilot
o Fusion testing means testing systems of sensors rather than single
sensors individually, but enabling the test engineer to look at individual
sensor performance as needed.
 Focus is on whether you can complete the mission, not on the
performance of a single sensor.
 Key Take-Away:
o Reliance on early ground testing and Fusion enabled the F-35 to
experience much better stability and maturity than legacy systems.
David Gilman, Senior Technical Advisor, Analytical Mechanics Associates, Inc.:
Lessons Learned - Inflatable Reentry Vehicle Experiment – 3
Theme: NASA has led the design of the Inflatable Reentry Vehicle and used a threestage sounding rocket from NASA’s Wallops Flight Facility to attain flight relevant
heating on the vehicle. This presentation discussed lessons learned.
30



The program encountered concerns over people becoming overstressed while
numerous steps were taken (presented in the briefing charts) to relieve stress on
the test team.
Some of the paths taken were not traditional (i.e., spending $250,000 on using
one facility when another facility would have been cheaper, in order to prevent
overloading the team).
Key Take-Aways:
o It is possible to keep people in high-stress situations if there is “light at the
end of the tunnel.”
o If there is no immediate end in sight, they tend to want to pull back on
work hours.
o It is prudent to give a day off occasionally to allow team members to
“recharge”.
Group discussion in closing T2S4:
Statements below came from both panelists and members of the audience. No personal
attribution was recorded.
 Is test-fix-test better than model-test-model?
o Space X uses the test-fix-test approach, constantly recalling boxes and
making fixes.
 Many PMs see early test failures (discoveries of system problems) as program
failures
o (Editorial note: Finding problems in a system being tested is not a test
failure, although that is the way it is often described and viewed by PMs
and external enablers.)
o We have gotten away from using testing to provide learning opportunities.
 We have become more conservative and avoid the risk of testing
in highly visible environments.
 Trading technical risk for political risk.
 Shutting down qualification facilities for black boxes is false economy.
o Maintain the capability to learn from flights, modify the box, re-qualify it, fly
it.
 “Good processes don’t ensure good performance, but bad processes can bring a
program to its knees.”
o Having the right people is more important than having the right processes.
 Use tiger teams to solve specific problems and disband them.
o Common leadership to stress problem-solving.
o Use good people, meet schedule, document results, disband.
 Regarding stressed team members:
o A stress-performance curve was mentioned. As you pass a point, things
begin to break down easily.
o Average age at Space X is 28; work week is 50 hours.
 Space X spends a lot of time documenting what pass and fail conditions are on a
test.
31

o “Nobody on the company succeeds if we are waiting on the ground to
solve an intractable problem.”
Getting testers involved early is the best way to go.
o Especially important when program starts are separated by long periods of
time.
o Both Boeing and L-M are trying to institutionalize this.
o Lead tester must be someone who is experienced in the entire
development process on another system.
 Difficult to find when program starts are infrequent.
32
Day 3 (Continued)
CASE Closing Session
The closing session was moderated by Laura McGill, Deputy Vice President of
Engineering, Raytheon Missile Systems, AIAA Vice President, Standards, General
Chair (CASE). Track speakers were: T1, Paul Collopy, University of Alabama,
Huntsville; T2, Allen Arrington, Sierra Lobo, NASA Glenn Research Center; T3, Sophia
Bright, Boeing. Note that track speakers’ comments as presented below include their
responses to other track speakers’ reports and are not presented in chronological order
of the session.
 There will be a website set up one month following this conference with briefing
notes, comment cards, and a high-level wrap-up white paper.
Track 1 Report – Paul Collopy, University of Alabama, Huntsville:
 Three kinds of complexity
o Interdependencies within the system
 Integration is messy; all pieces interact with all other pieces
 Decomposition is not possible
o Very large numbers of states and transitions
 NextGen is an example
 New validation approach needed
o Very large amount of design information
 Trying to fix every small problem that arises is a problem
 Can do “build and break” without decomposing system
 The form of the organization constrains development of systems
o This came up every day, in 50% of talks
o Structure matters
o The procedure for making design decisions affects the design
o Too formal a system of communications inhibits design
o The people side of a Work Breakdown Structure is hugely influential
 Ambiguity is essential in developing complex systems
o Good chief engineers are people who can work with ambiguity
o Reliance on computers has caused loss of judgment and understanding of
how systems work
o Comment from audience: Need both precision and ambiguity
o Comment from audience: Need the right questions to enable the right
answers (example: Why X significant digits?)
 T1 Key Takeaways:
o Learned how to be a better designer
33
o
o
o
o
o
o
o
 How to keep a system from becoming more complex than it needs
to be
 Bad architecture drives this
 Too many requirements drive us away from design elegance.
Look at test culture as a way to learn rather than a way to find someone to
blame.
Make designs more durable.
Define the “goodness” of a complex system.
 It should not be simply meeting requirements.
Recycling, re-using, or multi-functioning things do not always save cost
 Can increase complexity and drive cost up
We can’t possibly develop NextGen the way we have been taught to
develop systems
Cost overruns and delays are symptoms of over-complexity.
Audience comment : Complexity must buy its way into a platform.
Track 2 Report – Allen Arrington, Sierra Lobo, NASA Glenn Research Center:
(NOTE: Arrington’s comments are from the perspective of the test and verification
community)
 Engage the test community earlier, BUT…only if the test community understands
what’s going on in the design process
 We have tools. Are we using them properly?
 Are we training the next generation of engineers?
o We have an aging workforce; are we bridging the transition?
 Boeing initiates a new project every two-to-three years to keep trained
people in the pipeline.
o Audience comment: Do we always apply the logical progression of analysis,
ground test, flight test?
 “Audacious” comment: Will advances in computing allow skipping one
part – maybe ground test – in the future?
 Could AIAA construct a roadmap to get us to that point?
o The Track 2 Verification and Validation session focused on large numbers of
lines of code and simulation.
 Must ensure early test involvement for effective V&V.
 T2 Key Takeaways:
o Many good ideas, some require cultural transformation.
o Starting Monday:
 Better communication
 Attention to requirements fidelity and stability
 More up-front attention to analysis of alternatives
34
o Perhaps the AIAA Standards committee could take on the challenge of
standardizing definitions and nomenclature for these tracks.
Track 3 Report – Sophia Bright, Boeing:
 Situational awareness is very important for the systems engineer
o Full capabilities of a system emerge over time.
o Many questions need to be asked early in order to better handle complex
systems.
o Engineers must understand supportability and maintainability.
 Differentiate systemic issues from systematic issues.
o Incorporate into how we train our engineers.
 Communication is important.
o Engineers don’t do it well.
 Tools: Mental model; pictorial.
 Look for better/more effective ways.
 Listening is important for program managers, engineers, etc.
o Be able to know when and how to say no.
 Audience comment: Innovation can cause this to be an issue.
 Overall, acquisition issues are very complex.
o Issues can make our lives harder.

T3 Key Takeaways:
o We make systems more complex than they need to be.
 Focus on good architecture.
o Taxonomy – make sure we define terms before moving forward
 Better define complex vs. complicated.
 What is uncertainty?
o Training is important
o Need to develop a path forward for commercial use of space and air traffic
control
o Develop a process for transferring technology/knowledge throughout a
program, from design through operations
 Production needs to understand design
o There is a changing paradigm of costing sustainment
 What is real vs. perceived value?
 Seems to be left out of costing models
The Next CASE Event – Laura McGill moderated audience input:
 No more than three tracks
 Complexity is bigger than aerospace
35


o Bring in other disciplines
o Learn from their experiences
Facilitate more intermingling of tracks
o Encourage cross-attendance of PMs, testers, designers, budgeteers, etc.
o Step back and look at different ways to do things
 Cross-track
Budget is important
o Relate to complexity
o Keep at high-level
Closing Remarks – Michael Griffin, Chairman and CEO, Schafer Corporation,
AIAA President, Executive Chair (CASE):
 The systems engineering (SE) community should not forget:
o Good SE is about creating an elegant design
 Elegance consists of a design that
 Has efficacy (works);
 Is robust;
 Is efficient;
 Is as free as possible of unintended consequences.
o SE is about sociological considerations, but not only these
o SE is the link between analysis and design
 Schools teach engineering science
 How to analyze someone else’s design
 This is half the story
 SE includes creating that man-made world
 Designers and analysts don’t think the same way
 Analysts pick apart designs and find flaws
 Engineers link designers and analysts
o Look for “intelligent decomposition” of systems
 Reduce unintended consequences
o Engineers exist to turn ambiguity into knowledge
 Good engineers have a tolerance for ambiguity
 Can stand it longer than most
 Don’t turn ambiguity into soup too soon!
o Human cognition must be factored in
 SE is a team sport
 We have learned a lot about how humans decide things and the
effects of consequences on our cognition
o Confirmation biases: We look for information that supports our conclusions
and ignore other information.
36
o Distinguish between precision and correctness in the SE process.
o Sometimes we must “rise above principle.”
 Must we always be precise?
 It is better to know some things to four significant digits than
none to six.
Supplemental Information:
Ron Kohl, Moderator, Track2, Session 3: Observations, concerns and
suggestions resulting from CASE 2012
Although not reported at the closing session, Ron Kohl offered the following for
the report:
 Having the mid-morning and mid-afternoon breaks in a different building than the
technical sessions seemed to reduce the size of audience in the post-break
sessions.
 We may need to consider even more ‘non-conference, anti-conference’
approaches, methods, ‘tools’, take-home products. I think that our final product
was still more similar to, than different from, the standard conference model.
 More ‘practitioner’ oriented, ‘how to do it and why do it’ kind of info seems
warranted. We had some excellent things to worry about’ presentations, but
adding some ‘why bother’ and ‘consequences if you don’t’ info seems helpful in
order to allow practitioners to convince their management and leadership to
adopt some new or innovative approach/method.
 The name of our Conference, CASE, did not clearly communicate the nature of
the content. I think that we might want to consider more emphasis of the PM
and SE content of CASE in the name/title of the conference
 Complexity surfaced many times, in various contexts, and it seems that maybe
having a session (or more) about Complexity, how to recognize it, and what to do
about it, would be helpful. Paul C mentioned this item during the closing session.
 I think that separating our desired audience into PM, Chief Engineers and then
practitioners is perhaps too fine of a separation. I think that if we had two major
categories, namely PM and technical, then we could/would address all 3 groups
without needing to separate the Chief Engineer group from the other
‘practitioners’.
 Off-nominal behavior, rainy day scenarios and other fault-handling issues
surfaced many times and we may want to consider a session (or more) focused
on “What should my system do when bad things happen?” and how addressing
this question should surface in different parts of the lifecycle.
 Doing more V&V in the early part of the lifecycle (left side of the SE ‘V’). We may
want to have a session (or more) focused on just what could/should the V&V/I&T
37

community contribute to the left side of the ‘V’ activities. Some candidates could
be ‘supporting or forcing requirements reviews from a tester’s perspective’.
o During the closing session, someone (maybe Misty?) mentioned that we
should have more overlap, intermingling and/or cross-pollinating between
the development and the test tracks. Maybe having a half-day session (or
more) where the first half of the half-day is the devoted to the development
perspective of some topic/issue and the second half of the half-day
addresses the test perspective. For example (see 8 above), we could
have a session about ‘what developers would like to get from testing in the
early part of the lifecycle followed by ‘what the test community thinks it
could contribute to the early part of the lifecycle. And perhaps a grand
finale of ‘here are some V&V/test activities that could be done early/earlier
in the lifecycle (e.g. left side of the ‘V’).
The need to ‘justify’ adopting a new method. So maybe some more focus on the
business case (aka cost/benefit tradeoff, pros and cons, etc.) of why
management/leadership should consider adopting a new
method/technique/process would be helpful.
38
Recurring Topics:
Several topics, themes, or issues arose repeatedly in the presentations, often cutting
across sessions. An attempt has been made here to capture the most prevalent of
those.
 Definitions, taxonomy, and forums for interactions among disciplines are needed
in SE and V&V of complex systems and systems of systems.
o AIAA can play a key role here.
– ASI-WG
– CASE as a forum for constructive action
– Could AIAA Standards committee take on the challenge of
standardizing definitions and nomenclature for these tracks?
 Policies, processes, procedures, and organizational structures often inhibit
successful implementation of complex systems V&V.
o Experience trumps processes and procedures.
o Sound SE methodologies in SoS V&V mitigate risk.
 SE practices and methodologies are becoming more important in development,
verification and validation of systems as we move toward more increased
complexity in systems and systems of systems.
o Many test decision-makers are reluctant to test early and to support SoS
LVC testing in distributed networks.
 Integration of M&S into live T&E is imperative for SoS V&V.
o SoS complexities often preclude live testing because of cost, scheduling,
OITL, asset availability, or other issues.
 We need to maintain specialization as well as integration engineers.
 Most problems:
o Occur at the interfaces; most innovation occurs there as well.
o Are caused by lack of adequate planning, preparations, or definitions.
 Other root causes are resource limitations; turf / rice bowl disputes;
missing information from poorly-thought-out programs.
 Beware of requirements!
o They should be subordinate to goals or capabilities.
o Avoid requirements creep.
o Question them when they come as solutions.
o Not all great ideas are requirements.
o All levels of requirements must be linked and verifiable along the way.
 Integrate T&E into design process early
o Identify and fix problems early rather than late in a program.
o Late problem resolution is very expensive.
o More early GT results in less FT.
39


o Test-fix-test works; people are better at solving problems than predicting
them.
Efficiencies in live testing that result from integration of M&S or other innovations
place a strain on facility sustainment resources and user unit costs.
Communicate, communicate, communicate!
o Use effective pictures or mental models.
o Respond quickly to communications from other teams and disciplines;
they may be waiting for your wisdom.
40
Download