https://zhangsichu.com/posts/a-step-by-step-guide-to-threat-response-one/
将安全内建于开发流程中:威胁应对分步指南 (Build Security In) - 上 - ZhangSichu