Separation $($of domains$/$duties$)$

Isolation

Encapsulation

Modularity

Simplicity of design $($Economy of Mechanism$)$

Minimization of implementation $($Least Common Mechanism$)$

Open Design

Complete Mediation

Layering $($Defense in depth$)$

Least Privilege

Fail Safe Defaults $/$ Fail Secure

Least Astonishment $($Psychological Acceptability$)$

Minimize Trust Surface $($Reluctance to trust$)$

Usability

Trust relationships

Match the description to the correct principle.

Group of answer choices

Multiple users can share a system but cannot access each other's information.