Software development for safety-critical or security systems cannot tolerate the risk of failure or malfunctioning. Formal methods provide mathematical techniques that are used for the specification, development and the verification of complex systems in order to increase their reliability and robustness. By now, there is a vast collection of formal specification languages, theorem provers and model checkers, which serve as development tools in formal methods. These are usually