Least common mechanism Psychological acceptability (usability) Isolation Encapsulation Modularity Layering (Defense in Depth) Minimize trust surface Trust relationship