1. A method operable in a computing device for handling security risk comprising: receiving a plurality of taint indicators indicative of potential security risk from a plurality of distinct sources at distinct times; accumulating the plurality of taint indicators independently using a corresponding plurality of distinct accumulation functions; and assessing security risk according to a risk assessment function that is cumulative of the plurality of taint indicators.