Patent ID: 7676747

Claim:
A method for representing security features of a distributed computing system, comprising: providing a specification comprising defined object types representing security-related elements of distributed systems; and generating, using a computer, a representation of select security features of said distributed computing system using said specification; wherein said generating step comprises: instantiating object instances using said defined object types, wherein each said object instances models a security-related element of said distributed computing system; and assembling said object instances according to defined operational patterns which describe security mechanisms of distributed systems, to thereby generate said representation of said select security features, wherein said security-related elements which may be modeled by said object instances comprise components of security mechanisms, features of an environment in which distributed systems operate, and supporting security features, wherein each said object instance models a component of a security mechanism of said distributed computing system, a feature of an environment in which said distributed computing system operates, and a supporting security feature of said distributed computing system, wherein the supporting security features comprise at least refinements, wherein the refinements comprise at least one of zone properties, segment properties, and segment medium types.