CSSLP · Question #382
Which security design principle favors simple implementations and minimal components and therefore supports using single sign on systems and credential managers?
The correct answer is C. Economy of mechanism. The security design principle of 'economy of mechanism' favors simple implementations and minimal components, thus supporting systems like single sign-on and credential managers.
Question
Which security design principle favors simple implementations and minimal components and therefore supports using single sign on systems and credential managers?
Options
- AComponent reuse
- BLeast common mechanism
- CEconomy of mechanism
- DOpen design
How the community answered
(40 responses)- A3% (1)
- B3% (1)
- C88% (35)
- D8% (3)
Why each option
The security design principle of 'economy of mechanism' favors simple implementations and minimal components, thus supporting systems like single sign-on and credential managers.
Component reuse is about utilizing existing, proven components, which can be part of secure design but is not the principle focused on simplicity and minimal components.
Least common mechanism states that security mechanisms should not be shared between different users or entities if not strictly necessary, which is distinct from preferring simple implementations.
Economy of mechanism suggests that security mechanisms should be as simple and small as possible, making them easier to understand, implement correctly, and verify for security flaws. Using single sign-on systems and credential managers aligns with this principle by centralizing and simplifying authentication and credential management, reducing the number of separate security components and potential points of failure.
Open design means that the security of a mechanism should not depend on the secrecy of its design or implementation, which is not about simplicity or minimal components.
Concept tested: Economy of mechanism security principle
Source: https://www.microsoft.com/security/blog/2012/03/27/security-design-principles-part-1/
Topics
Community Discussion
No community discussion yet for this question.