Security Principles

• Least Privileges: only allow the minimum
• Economy of mechanism: keep it simple
• Open Design: avoid security through obscurity
• Complete mediation: check every access
• Permission based: deny by default
• Separation of privilege: multiple checks
• Least common mechanism: avoid sharing
• Ease of use: protection should be easy to use.

Notes: