Security metamodel