On the Importance of the Separation-of-Concerns Principle in Secure Software Engineering

The separation-of-concerns principle is one of the essential principles in software engineering. It says that software should be decomposed in such a way that di#erent "concerns" or aspects of the problem at hand are solved in well-separated modules or parts of the software. Yet, many security experts feel uneasy about trying to isolate security-related concerns, because security is such a pervasive property of a piece of software