Model a system with data flow diagrams and STRIDE to find and rank design-level threats before they are built.