Framework for universal security auditing