graphical security model