Security Pattern Catalog
The security pattern catalog contains all security patterns written by all security experts starting from the first work on security patterns in 1997.
Currently the catalog contains 97 patterns.
The following lists various books, catalogs and pattern papers, from which the security patterns are derived:
The list of patterns:
We applied several schemes and found that a hierarchical classification scheme using threat models works the best. It forms a hierarchical tree-like structure, in which patterns can be classified by the internal nodes as well as the leaf nodes. The internal nodes of the tree describe the context of application in which a pattern can be applied. The leaf nodes are based on a threat model; we followed the STRIDE model.
The classification is shown as a table. The columns are according to the STRIDE threat model. The rows describe the context of application. The rightmost columns contains patterns that target multiple threats in an application context. They are to be classified by the internal nodes (Core Patterns, Perimeter Patterns, etc.). The last row describes higher level patterns that are more like security principles. They apply to multiple application contexts and target multiple threats.
