Attack Patterns are used in both application development and standard IT operations. Additionally they can be used by educators to teach students common problems that applications face, and introduce them to good secure development practices in consistent and predictable fashion.