Verifying LTL Properties on Hierarchical Systems: Application to Aircraft Autopilot | IEEE Conference Publication | IEEE Xplore