inadequate security analysis