CYS 1212 Cybersecurity Design Principles Lecture 4 – Part 1 Modularity Principle

The security design should not be modular according to the Modularity Principle.

The Modularity Principle allows for upgrading individual parts of the security design without affecting the entire system.

Well-defined procedures for tracking flaws are not part of the Modularity Principle.

The principle of modularity helps in fixing flaws without considering priority severity.

Modularity considerations are not required when taking action for a maintenance release or bug fix.

The Modularity Principle in cybersecurity refers to the development of security functions as a single, unprotected module.

Implementing cryptographic functions separately in each protocol or application is considered a more secure design approach.

According to the Modularity Principle, each security mechanism should be able to support migration to new technology without requiring a system redesign.

The main goal of providing common security functions and services as separate modules is to increase the complexity of the security system.

Modularity in security architecture does not require mechanisms to protect modules from tampering.