contribute to attack-resilience in a software-intensive system. The other
category, “Protection System Patterns,” is concerned exclusively with access
control, security policy enforcement, subject (user/process) authentication,
association of security attributes (e.g., privileges) with subjects, secure