abstract security