Comparison of model checking and simulation to examine aircraft system behavior