Formal Model-Based Verification