摘要: The history of designing secure systems teaches the inadequacy enhancing existing with additional security functions to enforce requirements. design a system should start precise requirement specification. Then, be able verify enforcement requested properties model must built. Selecting an appropriate is crucial decision. designer application aware different abilities offered by models as well impacts resulting from modeling decisions. paper sketches criteria evaluate models. Evaluating according these assist developer in selecting most cope his application-specific