Operational Semantics and Verification of Security