We present an approach to integrating security into the system design process. Namely, models are made of system designs along with their security requirements, and security architectures are automatically generated from the resulting securitydesign models. We call the resulting approach "Model Driven Security" as it represents a specialization of model driven development to the domain of system security.