A clear understanding of how the pilot processes the information in the cockpit while carrying out particular tasks is crucial for developing the Human-Machine Interface and inceptors that help reduce pilot workload. Eye-tracking data synchronised with aircraft dynamics data is used here to study the high-workload scenario of executing an offset landing in an engineering flight simulator. The study focused on identifying differences in behavioural patterns between line pilots and test pilots. Evidence for significant differences were found regarding the ability to multitask and monitor aircraft states. The research output will lead to reduction of the pilot's workload and, in further study, proposition of a new display setups and inceptors.

No abstract

Phase-locking in a charge pump (CP) phase lock loop (PLL) is said to be inevitable if all possible states of the CP PLL eventually converge to the equilibrium, where the input and output phases are in lock and the node voltages vanish. We verify this property for a CP PLL using deductive verification. We split this complex property into two sub-properties defined in two disjoint subsets of the state space. We deductively verify the first property using multiple Lyapunov certificates for hybrid systems, and use the Escape certificate for the verification of the second property. Construction of deductive certificates involves positivity check of polynomial inequalities (which is an NP-Hard problem), so we use the sound but incomplete Sum of Squares (SOS) relaxation algorithm to provide a numerical solution.

This is the accepted version of the paper.This version of the publication may differ from the final published version. Abstract-We present a novel mixed time and frequency domain approach to the formal verification of oscillators properties which are specified in the frequency domain. We use robust periodogram specification to specify the oscillator behaviour in the close vicinity of the limit cycle. Using SAT modulo ODE (SMO) for Bounded Model Checking (BMC) of the non-linear hybrid automata, we show that the oscillator hybrid timed traces satisfy frequency domain specifications. Permanent

This is the accepted version of the paper.This version of the publication may differ from the final published version. We present a deductive numeric-symbolic approach, using Sum of Squares programming (SOS) and Quantier Elimination (QE), and verify that a Ring Oscillator (RO) starts oscillating from almost all random initial voltages on its nodes. Permanent