Threat Modeling: The Big Picture