security testing assertion2