catalogue of what they term “Core Security Patterns” for designing web services
that run in the Java 2 Enterprise Edition (J2EE) environment.While the majority
of the design patterns they describe are concerned with implementing system,
communication, and information security functions, such as user-to-service or