# Security Principles in 2023

DevFeed: [Security Principles in 2023](<https://devfeed.tech/articles/security-principles-in-2023-36970.md>)

Original publisher: [Read original article](<https://shostack.org/blog/security-principles-in-2023/>)

Author: Adam

Published: 2023-10-27T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [design](<https://devfeed.tech/tags/design.md>), [developer](<https://devfeed.tech/tags/developer.md>), [security](<https://devfeed.tech/tags/security.md>), [security-engineering](<https://devfeed.tech/tags/security-engineering.md>)

## AI overview

The author reflects on how their view of security design principles has changed. Although many principles remain valid, they are harder to learn, apply, teach, and assess consistently than threat modeling techniques because they require abstraction, careful analysis, and comparison of possible designs.

## Source excerpt

Principles are lovely, but do they lead us to actionable results?