Security knowledge framework