Security Defined Software (interim report)