C3-VULMAP, LINDDUN, privacy threat modelling, common weakness enumeration