Security Threat Identification and Testing