Skip to content

Latest commit

 

History

History
18 lines (18 loc) · 938 Bytes

Principle of Least Common Mechanism.md

File metadata and controls

18 lines (18 loc) · 938 Bytes

“Minimize the amount of mechanism common to more than one user and depended on by all users” — Ensure that only the least number of security-critical modules/paths as required are shared amongst the different actors/code so that impact from any vulnerability/compromise in shared components is limited and contained to the smallest possible subset. (See Saltzer and Schroeder's Secure Design Principles)


Slide Screenshot

0194.jpg


Slide Text

  • Least Common Mechanism
  • Saltzer & Schroeder 1975
  • Minimize Sharing Code, Roles
  • Common Points of Failure
  • Common -> Separate
  • Weigh Pros & Cons

References


Tags