A pattern language for security models · Study