formal modeling and verification of embedded systems