Restriction, state diagrams and security review