Techniques for assisting users in making security decisions