Security Strategies: How Can We Succeed?
By approaching security challenges with the following ideas in mind:
Holism: Ensuring that our security strategy is thorough
Threat Modeling: Thinking clearly and in an orderly, rigorous manner about risks; academic approach
Inverted Security: Selecting technical measures prudently and effectively
Least Privilege: Minimizing the consequences of any given failure
Defense in Depth: Making the most out the tools at hand, providing fail-safe measures
These principles help us evaluate plans, form solutions, and simplify the task of maintaining effective security