Process for modelling software security threats, standing for Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege