https://www.assurantcyber.com/blog/system_modeling_active_scenarios/