Formal validation for complex system needs two steps: Model then check properties: "Model-Cheking". The objective is to validate whether the system is safe and/or robust ?.