[218] suggested two additional secure design principles for software-intensive
computer systems.
1. The system design should anticipate future security requirements.
2. The developer should consider security from the start of the