The node you are looking for is at Security rules of thumb.