Formal Support for Quantitative Analysis of Residual Risks in Safety-Critical Systems