Live briefing
Everything about Application security
Measures taken to improve the security of an application
Application security (AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve security practices and, through that, to find, fix and preferably prevent security issues within applications. It encompasses the whole application life cycle from requirements analysis, design, implementation, verification as well as maintenance. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Application securityA 5-minute orientation
- Skim a recent paper: Edge-IIoTset: A New Comprehensive Realistic Cyber Security Dataset of IoT and IIoT Applications for Centralized and Federated LearningInfluential work since 2022
- Pick up a classic book: SAS(R) 9.1.3 Intelligence PlatformThe most-reprinted book on the subject
- Read the landmark paper: Semantic security against web application attacksCited 52 times
- Go sideways: Dynamic application security testingA closely related topic
- Go sideways: Static application security testingA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
Semantic security against web application attacks
Web application security assessment tools
Web application security engineering
Health Information Security in Hospitals: the Application of Security Safeguards
IoT: Application Protocols and Security
Security Qualitative Metrics for Open Web Application Security Project Compliance
Practical application of information security models
Biometric Security in Military Application
🆕 Influential since 2022
Edge-IIoTset: A New Comprehensive Realistic Cyber Security Dataset of IoT and IIoT Applications for Centralized and Federated Learning
Unmanned aerial vehicles (UAVs): practical aspects, applications, open challenges, security issues, and future trends
Web Application Security through Comprehensive Vulnerability Assessment
Application of blockchain technology in data security
Computer-Generated Holograms Application in Security Printing
📚 Books worth reading
SAS(R) 9.1.3 Intelligence PlatformSAS Publishing · 2006
e-Business and TelecommunicationsMohammad S. Obaidat, Joaquim Filipe · 2008
Foundations and Practice of SecurityJoaquin Garcia-Alfaro · 2012
Deployment Guide SeriesIBM Redbooks · 2005
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Secure data managementWillem Jonker, Milan Petkovic · 2004
Counterterrorism and CybersecurityNewton Lee · 2013
Microsoft Azure Security CenterYuri Diogenes · 2018
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Dynamic application security testing Dynamic application security testing (DAST) represents a non-functional testing process to identify security weaknesses and vulnerabilities in an application…
- Static application security testing Static application security testing (SAST) is used to secure software by reviewing its source code to identify security vulnerabilities. Although the process…
- Security testing Security testing is a process intended to detect flaws in the security mechanisms of an information system and as such help enable it to protect data and…
- OWASP OWASP, the Open Worldwide Application Security Project (formerly Open Web Application Security Project), is an online community that publishes open-source…
- Web application firewall A Web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service.…
- Interactive application security testing Interactive application security testing (abbreviated as IAST) is a security testing method that detects software vulnerabilities by interaction with the…
- Fluid Attacks Fluid Attacks is an application security (AppSec) company founded in 2001 in Colombia. It specializes in security testing for software development companies…
- Vulnerability management Vulnerability management is the "cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating" software vulnerabilities, which…