Live briefing
Everything about Application security
Measures taken to improve the security of an application
Application security (AppSec) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve security practices and, through that, to find, fix and preferably prevent security issues within applications. It encompasses the whole application life cycle from requirements analysis, design, implementation, verification as well as maintenance. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Application securityA 5-minute orientation
- Pick up a classic book: Software EngineeringThe most-reprinted book on the subject
- Read the landmark paper: On Combining Static, Dynamic and Interactive Analysis Security Testing Tools to Improve OWASP Top Ten Security Vulnerability Detection in Web ApplicationsCited 42 times
- Go sideways: Dynamic application security testingA closely related topic
- Go sideways: Static application security testingA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
On Combining Static, Dynamic and Interactive Analysis Security Testing Tools to Improve OWASP Top Ten Security Vulnerability Detection in Web Applications
Comparing effectiveness and efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) tools in a large java-based system
Comparing Effectiveness and Efficiency of Interactive Application Security Testing (Iast) and Runtime Application Self-Protection (Rasp) Tools in A Large Java-Based System
📚 Books worth reading
Software EngineeringRoger S. Pressman, Bruce Maxim · 1982
JavaScriptDavid Flanagan · 1996
The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
Unix System Administration HandbookEvi Nemeth, Garth Snyder · 1989
Photovoltaic design & installation for dummiesRyan Mayfield · 2010
Treaty Occupationay ToxicologySuelen Queiroz · 2010
Digital planetGeorge Beekman, Ben Beekman · 2011
Intelligent Information and Database SystemsAli Selamat · 2013
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Dynamic application security testing Dynamic application security testing (DAST) represents a non-functional testing process to identify security weaknesses and vulnerabilities in an application…
- Static application security testing Static application security testing (SAST) is used to secure software by reviewing its source code to identify security vulnerabilities. Although the process…
- Security testing Security testing is a process intended to detect flaws in the security mechanisms of an information system and as such help enable it to protect data and…
- OWASP OWASP, the Open Worldwide Application Security Project (formerly Open Web Application Security Project), is an online community that publishes open-source…
- Web application firewall A Web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service.…
- Interactive application security testing Interactive application security testing (abbreviated as IAST) is a security testing method that detects software vulnerabilities by interaction with the…
- Fluid Attacks Fluid Attacks is an application security (AppSec) company founded in 2001 in Colombia. It specializes in security testing for software development companies…
- Vulnerability management Vulnerability management is the "cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating" software vulnerabilities, which…