Threat Analysis in Systems-of-Systems: An Emergence-Oriented Approach