Automating risk analysis of software design models