What are the boundaries for our security model?

[Krymnos]

[] which groups of security issues can be distinguished? [] privacy [] which should we plan for within our limited time frame?