4C Security Reference Architecture