design pattern that fulfills an information security goal, such as confidentiality, integrity, or availability