https://softwarepatternslexicon.com/js/security-patterns/threat-modeling-and-security-testing/