1) Explain how to threat model software you acquire. 2) Explain how to threat model software you build. 3) List two specific non-threat-modeling-driven tests you can perform.