examining a system/actor in isolation, but a framework that can cover all aspects of
attacks/vulnerabilities might only need to model "input." Information leaks can be thought of
as output, but it's only a leak if it's an input to an attacker.
Additional Concepts under Exploration