reference:security_general