A Hierarchical Approach to the Formal Verification of Embedded Systems Using MDGs