Abstract: A method of and a design support system for generating a risk profile for at least part of an electronic system which is vulnerable to an attack originating from outside the system are described. The method comprises receiving an attack scenario identifying an attack and a potential target for the attack within the at least part of the system, receiving a selection, from a user, of a security analysis model for assessing the attack, receiving information identifying a selected security mechanism appliable in the at least part of an electronic system and generating a risk profile in dependence upon the security mechanism.