Using an Open Source Threat Model for Prioritized Defense