of security design patterns without reconciling or even acknowledging the
conflict between what security design patterns actually are (i.e., patterns
for security functions) and the types of design patterns that would actually
contribute to the attack-resistance, tolerance, and resilience of software.