Static Security Rule Checker