The Data and Analysis Center for Software (DACS) specifies three general principles for software assurance which work as a framework in order to categorize various secure design principles. Which of…

The Principle of separation of privileges, duties, and roles is a fundamental secure design principle included in General Principle 1, aiming to distribute critical functions among multiple entities to prevent a single point of failure or compromise.

"Assume environment data is not trustworthy" is a principle related to data validation and input handling, which falls under General Principle 2 (Secure the data).

"Simplify the design" is a general secure design principle, but specifically related to General Principle 3 (Design for secure operation), which focuses on ease of analysis and robust operation.

The Principle of least privilege, which dictates that a user or process should have only the minimum necessary authorizations to perform its function, is a core secure design tenet of General Principle 1.