Formal Methods For Resilient Control