https://123dok.net/document/yr3174r7-asset-oriented-threat-modeling.html