Designing principles for architectural security