designed to autogenerate repeatable threat models. Its methodology
enables the risk analyst to accurately and completely describe the security
characteristics of the system, from high-level architecture to low-level
implementation of details. Its consistent conceptual framework provides a