Modelling Layer: This layer is the foundation for a pattern-based transformation. System design models are enhanced with security intentions to specify security requirements.
Platform Independent Model: This layer represents a platform-independent model that describes security policies in a platform independent language.
Configuration Files: This is the technical layer which states security requirements in a deployable notation, e.g. WS-SecurityPolicy.