Keep it simple Parsing –Limited parsing of strings Minimizes risk of security holes from configuration errors –Modules do parsing are isolated and run with user privilege Libraries –Avoid standard C library, stdio Small code is more secure –Plug in interposing modules rather than complicating the core code
{}