SECURITY EVALUATION, TESTING AND SPECIFICATION