Solution-aware data flow diagrams for security threat modeling
design decisions : the bridge between rationale and architecture .