Security is an Active Process