Critically evaluate four advanced security design principles that must be embedded within the architecture of a modern web application to protect against complex web$-$based threats such as Cross$-$Site Request Forgery $($CSRF$),$ Server$-$Side Request Forgery $($SSRF$),$ and Command Injection. For each principle, provide an in$-$depth analysis of its practical implementation, challenges, and effectiveness in addressing contemporary security risks.