vulnerable security model