Web based threat modiling tool