building real-world security