Institute for Formal Models and Verification