1. A method for representing security features of a distributed system, comprising: creating abstractions to describe security mechanisms of a system; and creating a specification, using the abstractions, wherein the specification models components of the security mechanisms, features of an environment in which the system operates, and supporting security features.