{
  "code": null,
  "collection": "architecture",
  "href": "https://banes-lab.com/ontology#architecture-security-by-design",
  "id": "security-by-design",
  "kind": "principle",
  "layer": {
    "href": "https://banes-lab.com/ontology/schema#layer-security-core",
    "json": "https://banes-lab.com/json/records/layer/security-core",
    "label": "Security Core",
    "markdown": "https://banes-lab.com/records/layer/security-core.md",
    "ref": "layer:security-core"
  },
  "name": "Security by Design",
  "ref": "architecture:security-by-design",
  "relations": [
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-threat-modeling",
          "json": "https://banes-lab.com/json/records/architecture/threat-modeling",
          "label": "Threat Modeling",
          "markdown": "https://banes-lab.com/records/architecture/threat-modeling.md",
          "ref": "architecture:threat-modeling"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-secure-by-default",
          "json": "https://banes-lab.com/json/records/architecture/secure-by-default",
          "label": "Secure by Default",
          "markdown": "https://banes-lab.com/records/architecture/secure-by-default.md",
          "ref": "architecture:secure-by-default"
        }
      ],
      "relation": "requires"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-defense-in-depth",
          "json": "https://banes-lab.com/json/records/architecture/defense-in-depth",
          "label": "Defense in Depth",
          "markdown": "https://banes-lab.com/records/architecture/defense-in-depth.md",
          "ref": "architecture:defense-in-depth"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-compliance",
          "json": "https://banes-lab.com/json/records/architecture/compliance",
          "label": "Compliance",
          "markdown": "https://banes-lab.com/records/architecture/compliance.md",
          "ref": "architecture:compliance"
        }
      ],
      "relation": "reinforces"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-proactive-risk-reduction",
          "json": "https://banes-lab.com/json/records/lexicon/proactive-risk-reduction",
          "label": "Proactive Risk Reduction",
          "markdown": "https://banes-lab.com/records/lexicon/proactive-risk-reduction.md",
          "ref": "lexicon:proactive-risk-reduction"
        }
      ],
      "relation": "enables"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-security-as-afterthought",
          "json": "https://banes-lab.com/json/records/lexicon/security-as-afterthought",
          "label": "Security as Afterthought",
          "markdown": "https://banes-lab.com/records/lexicon/security-as-afterthought.md",
          "ref": "lexicon:security-as-afterthought"
        }
      ],
      "relation": "conflicts-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-developer-ergonomics",
          "json": "https://banes-lab.com/json/records/lexicon/developer-ergonomics",
          "label": "Developer Ergonomics",
          "markdown": "https://banes-lab.com/records/lexicon/developer-ergonomics.md",
          "ref": "lexicon:developer-ergonomics"
        }
      ],
      "relation": "tensions-with"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#tension-developer-ergonomics-security-by-design",
          "json": "https://banes-lab.com/json/records/tension/developer-ergonomics-security-by-design",
          "label": "Security by Design / Developer Ergonomics",
          "markdown": "https://banes-lab.com/records/tension/developer-ergonomics-security-by-design.md",
          "ref": "tension:developer-ergonomics-security-by-design"
        }
      ],
      "relation": "tensions"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/algorithms#algorithms-security-core",
          "json": "https://banes-lab.com/json/records/algorithms/security-core",
          "label": "Security Core",
          "markdown": "https://banes-lab.com/records/algorithms/security-core.md",
          "ref": "algorithms:security-core"
        }
      ],
      "relation": "contracts"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-security-as-afterthought",
          "json": "https://banes-lab.com/json/records/lexicon/security-as-afterthought",
          "label": "Security as Afterthought",
          "markdown": "https://banes-lab.com/records/lexicon/security-as-afterthought.md",
          "ref": "lexicon:security-as-afterthought"
        }
      ],
      "relation": "violated-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-trust-boundaries",
          "json": "https://banes-lab.com/json/records/lexicon/trust-boundaries",
          "label": "Trust Boundaries",
          "markdown": "https://banes-lab.com/records/lexicon/trust-boundaries.md",
          "ref": "lexicon:trust-boundaries"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-input-validation",
          "json": "https://banes-lab.com/json/records/architecture/input-validation",
          "label": "Input Validation",
          "markdown": "https://banes-lab.com/records/architecture/input-validation.md",
          "ref": "architecture:input-validation"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-access-control",
          "json": "https://banes-lab.com/json/records/architecture/access-control",
          "label": "Access Control",
          "markdown": "https://banes-lab.com/records/architecture/access-control.md",
          "ref": "architecture:access-control"
        }
      ],
      "relation": "refactored-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology/schema#vocabulary-severity-mandatory",
          "json": "https://banes-lab.com/json/records/vocabulary/severity-mandatory",
          "label": "mandatory",
          "markdown": "https://banes-lab.com/records/vocabulary/severity-mandatory.md",
          "ref": "vocabulary:severity-mandatory"
        }
      ],
      "relation": "severity"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/records/architecture-category/security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/records/architecture-category/security-privacy-compliance-governance.md",
          "ref": "architecture-category:security-privacy-compliance-governance"
        }
      ],
      "relation": "category"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-fail-secure",
          "json": "https://banes-lab.com/json/records/architecture/fail-secure",
          "label": "Fail Secure",
          "markdown": "https://banes-lab.com/records/architecture/fail-secure.md",
          "ref": "architecture:fail-secure"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-attack-surface-reduction",
          "json": "https://banes-lab.com/json/records/architecture/attack-surface-reduction",
          "label": "Attack Surface Reduction",
          "markdown": "https://banes-lab.com/records/architecture/attack-surface-reduction.md",
          "ref": "architecture:attack-surface-reduction"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-risk-management",
          "json": "https://banes-lab.com/json/records/architecture/risk-management",
          "label": "Risk Management",
          "markdown": "https://banes-lab.com/records/architecture/risk-management.md",
          "ref": "architecture:risk-management"
        }
      ],
      "relation": "reinforced-by"
    },
    {
      "links": [
        {
          "href": "https://banes-lab.com/ontology#architecture-category-error-handling-resilience",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-error-handling-resilience",
          "label": "Error Handling / Resilience",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-error-handling-resilience.md",
          "ref": "chapter:/ontology#architecture-category-error-handling-resilience"
        },
        {
          "href": "https://banes-lab.com/ontology#architecture-category-security-privacy-compliance-governance",
          "json": "https://banes-lab.com/json/ontology/principles/architecture-category-security-privacy-compliance-governance",
          "label": "Security / Privacy / Compliance / Governance",
          "markdown": "https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md",
          "ref": "chapter:/ontology#architecture-category-security-privacy-compliance-governance"
        },
        {
          "href": "https://banes-lab.com/ontology/lexicon#lexicon-category-security-privacy-compliance",
          "json": "https://banes-lab.com/json/ontology/lexicon/lexicon-category-security-privacy-compliance",
          "label": "Security Privacy Compliance",
          "markdown": "https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md",
          "ref": "chapter:/ontology/lexicon#lexicon-category-security-privacy-compliance"
        },
        {
          "href": "https://banes-lab.com/ontology/algorithms#algorithms-domain-architectural-clusters",
          "json": "https://banes-lab.com/json/ontology/algorithms/algorithms-domain-architectural-clusters",
          "label": "Architectural Clusters",
          "markdown": "https://banes-lab.com/ontology/algorithms/algorithms-domain-architectural-clusters.md",
          "ref": "chapter:/ontology/algorithms#algorithms-domain-architectural-clusters"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-vocabulary-severity",
          "json": "https://banes-lab.com/json/ontology/schema/the-vocabulary-severity",
          "label": "Severity levels",
          "markdown": "https://banes-lab.com/ontology/schema/the-vocabulary-severity.md",
          "ref": "chapter:/ontology/schema#the-vocabulary-severity"
        },
        {
          "href": "https://banes-lab.com/ontology/schema#the-resolutions",
          "json": "https://banes-lab.com/json/ontology/schema/the-resolutions",
          "label": "The resolutions",
          "markdown": "https://banes-lab.com/ontology/schema/the-resolutions.md",
          "ref": "chapter:/ontology/schema#the-resolutions"
        }
      ],
      "relation": "linked-from"
    }
  ],
  "summary": "A design rule that threats are modeled and controls built into every component from its first design.",
  "siblings": {
    "next": {
      "href": "https://banes-lab.com/ontology#architecture-defense-in-depth",
      "json": "https://banes-lab.com/json/records/architecture/defense-in-depth",
      "label": "Defense in Depth",
      "markdown": "https://banes-lab.com/records/architecture/defense-in-depth.md",
      "ref": "architecture:defense-in-depth"
    },
    "previous": {
      "href": "https://banes-lab.com/ontology#architecture-database-normalization",
      "json": "https://banes-lab.com/json/records/architecture/database-normalization",
      "label": "Database Normalization",
      "markdown": "https://banes-lab.com/records/architecture/database-normalization.md",
      "ref": "architecture:database-normalization"
    }
  },
  "up": {
    "href": null,
    "json": "https://banes-lab.com/json/api/records/architecture",
    "label": "Architecture principles",
    "markdown": "https://banes-lab.com/api/records/architecture.md",
    "ref": "api:records/architecture"
  },
  "aliases": [],
  "exemplar": {
    "after": "function createFoo(request: Request, identity: Identity) {\n  const input = CreateFooSchema.parse(request.body);\n  authorize(identity, \"foo:create\");\n  return fooStore.save(Foo.create(input));\n}",
    "before": "function createFoo(request: Request) {\n  return fooStore.save(request.body as Foo);\n}",
    "lang": "ts",
    "medium": "code"
  },
  "formedBy": null,
  "scope": [
    "system",
    "service",
    "codebase"
  ],
  "severity": "mandatory"
}