Implementing a multi-level finite state machine with MATLAB Simulink and Stateflow in the environment of high-integrity aircraft controller software | IEEE Conference Publication | IEEE Xplore