2.3.1 Defensive design