Complex, networked, distributed cyber-physical systems (CPSs) are emerging in many safety-critical application domains such as aerospace and automotive. Design of such systems heavily relies on insights and experiences of engineers as principled design methodologies that can cope with the complexity of these systems are lacking. As a result, extensive testing and fine-tuning is required to ensure that the final product satisfies the design objectives.