Statistics for Finding False Assurance in Formal Verification of Software Systems