The security of a software system is an attribute that permeates the whole system. As such, any attempt to address security concerns in a software system must, of necessity, be global in nature, and be applied consistently at every relevant location. To implement a methodology that would encompass these two high-level goals -separation of security concerns and consistent implementation of security solutions – we chose to build an AOSD-based framework. In this paper, we describe the framework as well as obstacles we encountered in applying it to commercial projects.