Comprehensive threat model analysis for software