Patterns in Security Enforcement Policy Development

Creating security enforcement policies is a complex design problem that is often done using a native GUI. A security policy for an enterprise must span native applications and be expressed in a format that best captures design problems. This paper looks at the patterns that emerge when developing enterprising spanning security policy using a language based approach.