Demystifying IFS Security