c++ assurance information assurance software computer security thin-client assurances java application courtier .net information security benchmarking auto java metrics metrics data j2ee radius3 security best practices