knowledge of attackers on previous related applications, understanding
of attackers’ interests, and knowledge of secure development practices.
2. Threat Modeling—Provide users an understanding of the attributes of
the software, identify attackers within the given operating environment