Formal Modelling and Analysis of Safety-Critical Systems