Inside the Box: Analysing Cyber-physical Systems, Exploiting Models and Specifications