The security configuration of an application during assembly stage that is defined in the deployment descriptors and enforced by the security run time.