Formal Verification with Confidence Intervals to Establish Quality of Service Properties of Software Systems