when designing secure business applications, the default approach to coding logic into the code should be to have the code reject invalid cases rather than pass normal legitimate cases pass normal legitimate cases rather than reject invalid cases check for valid cases only when invalid cases are present assume all cases are valid unless an exception is triggered