The Open Web Application Security Project $($OWASP$)$ provides a distillation of several of the most well known sets of principles except $\_\_\_\_\_\_\_\_\_\_\_\_\_\_.$

a$.$

apply defense in depth for complete mediation.

b$.$

run with least privilege.

c$.$

use a positive security model to minimze attack surfaces.

d$.$

trust Infrastructure.