Security threats, policies, and mechanisms