of a process, the user or process requesting that access or execution
should be checked for proper authorization, and the request should be
rejected if the requestor is not appropriately authorized.
u Fail-Safe Defaults—This principle calls for defaulting, in securityrelevant decision-making, toward denial rather than permission. Thus,