During the initial stages of product design, security architects usually come into the picture and perform threat analysis using threat modeling.