Extensible Security Patterns

Abstract

Security engineering is more complex in modern enterprise systems, having to consider diverse operational properties including those of participants and resources. This paper describes extensible security patterns, a framework for engineering a system's security according to its operational properties. The framework is referred to as extensible, as its language and methodology allow for refinement of the patterns at different phases of the system's specification.