US8650640B2 - Using a Declaration of Security Requirements to Determine Whether to Permit Application Operations