An approach in defining Information Assurance Patterns based on security ontology and meta-modeling