https://liangroup.net/blog/security-engineering-roadmap/