An assistant for threat modeling