Jerome H. Saltzer & Michael D. Schroeder (1975)
Proceedings of the IEEE, 63(9), 1278-1308.
DOI: https://doi.org/10.1109/PROC.1975.9939
Abstract. The foundational paper on computer-security design. Introduces the eight principles that still structure security engineering: economy of mechanism, fail-safe defaults, complete mediation, open design, separation of privilege, least privilege, least common mechanism, and psychological acceptability.
Tags: security foundational
