Using Model Checking to Explore Checklist-Guided Pilot Behavior

Abstract

Pilot noncompliance with checklists has been associated with aviation accidents. This noncompliance can be influenced by complex interactions among the checklist, pilot behavior, aircraft automation, device interfaces, and policy, all within the dynamic flight environment. We present a method that uses model checking to evaluate checklist-guided pilot behavior while considering these interactions. We illustrate our approach with a case study of a pilot performing the “Before Landing” checklist. We use our method to explore how different design interventions could impact the safe arming and deployment of spoilers. Results and future research are discussed.

ACKNOWLEDGMENTS

The work documented here was completed while Matthew L. Bolton was a Senior Research Associate for San José State University Research Foundation at NASA Ames Research Center. The work has been supported in part by NASA Cooperative Agreement NCC1002043 to the National Institute of Aerospace (NIA; UVA-03-01, Sub-Awards 2623-VA and 2723-VA), Grant Number T15LM009462 from the National Library of Medicine (NLM), and NASA contract NNA10DE79C (NextGenAA: Integrated model checking and simulation of NextGen authority and autonomy). The content is solely the responsibility of the authors and does not necessarily represent the official views of the NIA, NASA, NLM, or the National Institutes of Health.