Theoretical Foundations of Practical Information Security