Generating security description of applications for security frameworks