What are the Security Design Principles used in Web Security?
What are the Security Design Principles used in Web Security?
The Security Design Principles used in Web Security are as follows:
- Least Privilege: this provides the security for the system and provides a way to limit the resources given to a process when it starts.
- Defence in Depth: the defence of the website is to provide the depth in the content such that it becomes hard for someone to break it.
- Secure Weakest Link: this way the security can’t be breached as most of the attacks will be on the weak links only.
- Fail-safe Stance: provide a way to have the security such that if one security fails then it will have the model that will support it.
- Secure By Default: there are security that can be provided by default to secure the websites from being hacked.
- Simplicity: the design principles of the website should be simple to use and it should be easy customizable.
- Usability: the design of the website should be usable such that anyone can use the website.