Using Security Patterns to Model and Analyze Security Requirements∗

Recently, there has been growing interest in identifying patterns for the domain of system security, termed security patterns. Currently, those patterns lack comprehensive structure that conveys essential information inherent to security engineering. This paper describes research into investigating an appropriate template for security patterns that is tailored to meet the needs of secure systems development. In order to maximize comprehensibility, we make use of well-known notations such as the Unified Modeling Language (UML) to represent structural and behavioral information. Furthermore, we investigate how verification of requirements properties can be enabled by adding formal constraints to the patterns.