Identifying and Exploring Security Essentials