A combined formal analysis methodology and towards its application to hierarachical state transition matrix designs