patterns that map to the desired security properties of information systems:
confidentiality, integrity, availability, privacy, authentication, authorization,
and nonrepudiation. These security patterns are then abstracted as goals, and a
correlated “anti-model” is developed that captures a set of attacker “anti-goals”