Unverified50% confidenceFactExact time
The principle of least privilege was systematically proposed by Saltzer and Schroeder in 1975 in "The Protection of Information in Computer Systems" and remains a core requirement of compliance frameworks such as SOC 2 and ISO 27001 to this day.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedThe principle of least privilege originates from the classic 1975 paper on system security design by Saltzer and Schroeder, and is one of the core pillars of zero-trust architecture.77% similarUnverifiedThe principle of least privilege originated from the operating system security research of Jerome Saltzer and Michael Schroeder in the 1970s and was later incorporated into the core principles of the NIST Cybersecurity Framework.74% similarUnverifiedSaltzer and Schroeder proposed the "deny by default" security principle in 197570% similarUnverifiedThe principle of least privilege originated in computer security theory in the 1970s, was proposed by Jerome Saltzer at MIT, and was later incorporated into the U.S. Department of Defense Trusted Computer System Evaluation Criteria (TCSEC).69% similarVerifiedThe Principle of Least Privilege (PoLP) originates from the field of computer security in the 1970s and was proposed by Jerome Saltzer at MIT.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1030539API
curl https://kongchang.com/api/v1/knowledge/claims/1030539MCP
get_claim(id=1030539)