Mode confusion analysis of a flight guidance system using formal methods | IEEE Conference Publication | IEEE Xplore