Guidelines for the security analysis project microsoft corporation