This document describes a method called DECOR for domain analysis of design defects, specification of defects, and generation of detection algorithms. The method involves 5 steps: 1) domain analysis of defects based on literature, 2) specification of each defect using a domain-specific language, 3) generation of operational specifications from the formal specifications, 4) detection of suspicious code elements based on the operational specifications, and 5) identification of classes affected by design defects. The goal is to provide an explicit process for defect specification and validation of generated detection algorithms.