Threat and Risk Analysis for the cloud