Runway Safety Systems: EMAS, ILS, PAPI, and Overrun Protection

Runway Incursions: The Most Dangerous Hazard on the Ground

A runway incursion occurs whenever an aircraft, vehicle, or person is on a runway without authorization — either by entering without clearance, by failing to exit when expected to, or by crossing without proper coordination. Runway incursions are among the most dangerous events in aviation because they create potential for ground collisions at high speed: a departing aircraft that collides with an unauthorized aircraft or vehicle during its takeoff roll may do so at 140–160 knots, with catastrophic consequences for both involved parties and no possibility of avoidance once detected at close range.

The worst aviation accident in history was a runway collision: KLM Flight 4805 and Pan Am Flight 1736 at Tenerife North Airport on March 27, 1977, killed 583 people when a KLM Boeing 747 began its takeoff roll without clearance in heavy fog and collided with a Pan Am 747 taxiing on the runway. The Tenerife disaster triggered a fundamental reassessment of airport communication procedures, runway incursion prevention, and the human factors underlying misunderstandings between flight crews and air traffic control.

The FAA categorizes runway incursions by severity on a scale from A to D. Category A events are those in which a collision narrowly averted through last-second maneuver or detection. Category B events involve separation that decreases and creates significant potential for collision. Category C and D events are less critical but still represent a breakdown in the separation system. The FAA targets zero Category A and B incursions; in practice, several Category A events occur annually at US airports, each representing a near-miss that had it gone differently would have been a catastrophic accident.

Human factors dominate runway incursion causation. Studies by the FAA, EUROCONTROL, and ICAO consistently find that the majority of runway incursions result from flight crew errors (failing to hold short, failing to read back correctly, misunderstanding taxi clearances, failing to confirm position), air traffic controller errors (issuing conflicting clearances, failing to monitor, distraction), or a combination of both. Airport design — particularly complex taxiway configurations with poorly marked intersections and non-intuitive routing — is a contributing factor at many airports. Pilot and controller fatigue, particularly during overnight operations, is a recognized but difficult-to-quantify contributor.

Safety Technology: Preventing Incursions Before They Happen

The most significant technological development in runway incursion prevention is the FAA's Airport Surface Detection Equipment, Model X (ASDE-X) and its successor Airport Surface Surveillance Capability (ASSC) systems, which are deployed at major airports and provide controllers with a real-time display of all aircraft and vehicles on and near the airport surface. ASDE-X fuses data from surface movement radar, multilateration (MLAT) transponder tracking, and ADS-B (Automatic Dependent Surveillance-Broadcast) signals to provide a comprehensive picture of surface traffic. Controllers can see every transponder-equipped aircraft's position, groundspeed, and callsign on a display that updates several times per second.

Complementing controller-side surveillance, the Airport Movement Area Safety System (AMASS) integrates with ASDE-X to provide automatic conflict alerts — visual and audio warnings when predicted traffic movements would result in a conflict. AMASS uses kinematic modeling of each detected track to predict future positions and flags situations where an aircraft is departing toward a runway occupied by another aircraft, or where two aircraft are approaching the same intersection from different directions. The alert gives controllers additional seconds to issue corrective instructions.

On the aircraft side, Runway Awareness and Advisory Systems (RAAS) provide pilots with position awareness and cautions based on GPS position overlaid on a database of airport layouts. RAAS announces when the aircraft is approaching a runway, entering a runway, lining up for takeoff, and when an approach is made to a runway shorter than the landing distance required. The system does not prevent a crew from entering a runway incorrectly, but it provides an independent voice advisory that can catch errors before they become incursions. Many airlines have mandated RAAS as standard equipment on their fleets.

The next generation of surface safety involves digital information management that reduces the primary human factors cause of runway incursions: miscommunication and incorrect readback. Digital taxi clearance systems (D-TAXI) allow controllers to transmit taxi routes to aircraft electronically, displayed on cockpit moving map displays. The crew can review the route, confirm it matches their expectations, and receive a moving-map depiction of their intended path — greatly reducing the cognitive load of parsing complex taxi instructions delivered verbally over radio in a busy ground control environment. EUROCONTROL has implemented D-TAXI variants at multiple European airports, and FAA NextGen programs are advancing similar capabilities at US airports.

EMAS: Engineered Materials Arresting Systems

When an aircraft overruns the end of a runway — a runway excursion — the available stopping distance is finite and may be insufficient. Runway ends are typically followed by a Runway End Safety Area (RESA) or Runway Safety Area, a cleared and graded zone that provides additional stopping distance and reduces the severity of overruns. However, geographic constraints at many airports — water, roads, terrain, buildings — limit the size of RESA that can be provided.

The Engineered Materials Arresting System (EMAS), developed by Zodiac Aerospace (now Safran) and installed at numerous airports worldwide, provides an alternative approach to limiting overrun consequences where conventional RESA cannot meet minimum length requirements. An EMAS installation consists of a bed of cellular concrete — a lightweight, crushable material — installed at the end of the runway within the overrun area. When an aircraft rolls onto EMAS, the landing gear sinks into the crushable concrete, which deforms progressively under the aircraft's weight, generating controlled deceleration forces that bring the aircraft to a stop.

EMAS has been credited with preventing serious accidents in multiple real overrun events. At JFK International Airport in 1999, an American Airlines Boeing 737 overran Runway 4R and stopped within the EMAS bed, which was credited with preventing the aircraft from reaching the perimeter road beyond the runway end. At Chicago Midway Airport in 2005, a Southwest Airlines Boeing 737 overran Runway 31C in icy conditions; the aircraft breached the airport perimeter after the EMAS bed — which had not yet been installed following a delay in the program — was absent. Five occupants of a car struck by the aircraft were killed; the tragedy reinvigorated EMAS installation programs at airports where RESA minimums could not be met.

EMAS installation is expensive — a single installation can cost $15–30 million depending on runway width and system length — and requires periodic inspection and replacement of damaged sections. The crushable material is not renewable after a significant aircraft roll-through; sections crushed in a real overrun event must be replaced before the system is effective again. Despite the cost, the FAA has mandated EMAS at airports where runway safety area requirements cannot otherwise be met, recognizing that the cost per installed system is far lower than the cost of the accidents it prevents.

Lighting and Markings: The Visual Framework

Runway surface markings and lighting systems form the fundamental visual framework within which pilots navigate the airport environment. These systems are standardized internationally under ICAO Annex 14 specifications and provide consistent cues regardless of which airport a pilot visits. The standardization is itself a safety feature — pilots have confidence that a hold short marking or a runway edge light means the same thing at every airport.

The most safety-critical marking is the runway holding position marking — the dual solid and dashed yellow lines across a taxiway that designates the boundary within which an aircraft must hold until receiving runway entry clearance. The solid lines face the runway (the restricted side); the dashed lines face away (the permitted side). This design allows a pilot to instantly determine which side of the holding position they are on: if you can see solid lines, you are facing the boundary and must not cross without clearance. The marking seems simple but its consistent application across all airports, combined with trained crew procedures, represents one of the most effective runway incursion prevention mechanisms available.

Runway guard lights — elevated yellow flashing lights installed at runway holding positions — provide an additional visual cue, particularly in low-visibility conditions where surface markings are less visible. Category I, II, and III runway approaches trigger different lighting configurations that signal the precision of available approach guidance and the visibility conditions in which the runway is usable. Threshold lights (green facing approach, red facing runway interior) define the usable runway end. Runway edge lights (white on most of the runway, yellow in the final 610 meters before the departure end, red at the opposite end for arrivals) define the runway laterally. Together, these lighting systems allow pilots to operate on runways in conditions where only the lights are visible — the essence of Category III operations, which permit landings in near-zero visibility.

The Stop Bar lighting system — a row of red lights embedded in the taxiway across a runway holding position, which can be illuminated and extinguished by the controller — provides a highly visible command signal that supplements verbal clearance. When the stop bar is illuminated, aircraft must hold regardless of other indications. When the controller extinguishes the stop bar, it signals runway crossing or entry clearance. Stop bar systems are particularly valuable at complex intersections in low visibility, where the audible clarity of radio communications may be compromised.

ATC Procedures: The Human Layer of Defense

Air traffic control procedures represent the primary layer of runway safety defense, and their effectiveness depends on both procedural design and human performance. Standardized phraseology — the specific words and formats required for ATC communications — reduces ambiguity and misunderstanding. The phrase "cleared to land" is unambiguous; "you're cleared" is not. "Hold short of Runway 28" is clear; "remain clear" is not. These standards, developed over decades of accident investigation, are designed to eliminate the language ambiguity that has contributed to multiple runway incursion accidents.

Readback procedures require pilots to repeat back critical elements of clearances — particularly runway entry and crossing clearances, hold short instructions, and takeoff clearances. Controllers are trained to verify readbacks and correct deviations immediately. The readback-hearback loop is a critical error-catching mechanism: if a pilot reads back "cleared for takeoff Runway 28" when the actual clearance was "line up and wait Runway 28," the controller hears the error and can correct it before the aircraft enters the runway. Studies show that when readbacks are consistently required and checked, the rate of crew misunderstanding reduces substantially.

The "one runway at a time" principle — that only one aircraft should be authorized to use a runway (for takeoff, landing, or crossing) at any given time — is the procedural foundation of runway safety. Controllers who need to sequence multiple operations must maintain explicit track of which aircraft is on which runway and ensure that each runway is clear before authorizing the next operation. Traffic level at major hub airports creates significant cognitive load; the controller's ability to maintain this mental model accurately is both essential and under constant pressure from volume and interruptions.

Runway crossing procedures at complex airports — particularly those with multiple crossing runways — are managed through specific protocols that include tower-to-tower coordination, crossing limit systems, and in some cases electronic runway crossing approval systems that require controller confirmation before the crossing is authorized. These procedural layers exist because a single controller's momentary distraction should not be sufficient to allow an incursion; multiple barriers should exist between a potential error and an actual conflict.