Practices and challenges of threat modelling in agile environments https://doi.org/10.1007/s00287-023-01549-5