Security in three ds: detect, decide and deny