legacy system security