add security test code