Security patterns http://www.ito.tu-darmstadt.de/securitypatterns Attack Surface http://www-2.cs.cmu.edu/afs/cs/project/svc/projects/security/tr04-102.pdf