Most states recognize that the owner of the property owes a duty to its tenants, customers, or visitors to take reasonable steps to protect against criminal attacks.