---
title: "Explain the design principles of security in OS."  
description: "Explain the design principles of security in OS."  
author: "Revati S Misra"  
published: 2023-04-02  
updated: 2023-04-05  
canonical: https://www.mindstick.com/forum/157670/explain-the-design-principles-of-security-in-os  
category: "Operating System"  
tags: ["windows", "operating system"]  
reading_time: 2 minutes  

---

# Explain the design principles of security in OS.

What are the [design principles](https://www.mindstick.com/forum/33493/oops-design-principles-what-is-uml-what-is-the-need-of-uml) of [security](https://www.mindstick.com/articles/43813/new-security-technologies) in the [operating system](https://www.mindstick.com/articles/229069/operating-system-development)?

## Replies

### Reply by Krishnapriya Rajeev

The [design](https://www.mindstick.com/articles/12279/interior-design-and-furniture-store-wordpress-theme) [principles](https://www.mindstick.com/interview/34041/understanding-solid-principles-in-object-oriented-design) of security in an operating [system](https://www.mindstick.com/articles/23411/the-most-effective-method-to-find-the-perfect-small-business-phone-system-for-your-business) are listed below:

- **Least privilege:** This principle states that users should only be granted the minimum level of access necessary to perform their tasks. This reduces the risk of accidental or intentional damage to the system.
- **The economy of mechanism**: This principle states that security mechanisms should be as simple and efficient as possible to reduce the risk of errors or vulnerabilities.
- **Fail-safe defaults:** This principle states that the system should be configured to deny access by default and only allow access to authorized users or applications.
- **Complete mediation:** This principle states that every access to a resource should be checked and authorized by the system, and not simply assumed to be authorized based on previous access.
- **Open design:** This principle states that the security mechanisms should be open and visible to allow for scrutiny and testing by security experts and researchers.
- **Separation of privilege:** This principle states that access to critical resources should require the combination of multiple factors, such as a password and a smart card, to reduce the risk of unauthorized access.
- **Least common mechanism:** This principle states that shared resources should be minimized to reduce the risk of security breaches caused by a vulnerability in a common component.
- **Psychological acceptability:** This principle states that security mechanisms should not be so burdensome that users are tempted to circumvent them.

These design principles ensure that an operating system is *secure* and *resistant to attacks*.


---

Original Source: https://www.mindstick.com/forum/157670/explain-the-design-principles-of-security-in-os

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.