Denning principles