Extensible Security Patterns

Security engineering is more complex in modern enterprise systems, having to consider diverse operational properties including those of participants and resources. This paper describes extensible security patterns, a framework for engineering a system´s security according to its operational properties. The framework is referred to as extensible, as its language and methodology allow for refinement of the patterns at different phases of the system´s specification.