Principles for Information Technology Security—the researchers
produced an initial short list of five properties that could realistically be
measured: (1) smallness and simplicity; (2) separation of concerns; (3)
defense in depth; (4) minimization of critical functions/components;