Security by Design

Security by design means incorporating security requirements and controls into a system's architecture and design from the outset, rather than retrofitting them after development. This approach produces systems with smaller attack surfaces, clear trust boundaries, and well-defined security properties.

Security by design practices include threat modeling, defining security requirements during specification, and selecting secure-by-default frameworks and libraries.