Process for Attack Simulation and Threat Analysis (PASTA)