Measuring the interplay of security principles in software architectures