that suggest and describe general design principles for secure software
(including advice on secure software architecture) is proliferating.
Saltzer and Schroeder’s The Protection of Information in Computer
Systems [215] identified a set of access control and other protection principles