Which principle of secure design states that a security mechanism's methods must be testable?
Separation of privilege
Least common mechanism
Complete mediation
Open design
Economy of mechanism
Submit