Category threat modeling frameworks