Trends in Security: How to Create a Scalable Threat-modeling Practice