Formal Methods In System Design