patterns security security requirements