Application Security
Application Security involves embedding robust security measures throughout the software development lifecycle to protect apps from vulnerabilities and cyber threats.
OVERVIEW
Threat Modelling Manifesto asks four high level questions that can be used as a handrail here.
A possible threat exists when the combined likelihood of the threat occurring and impact it would have on the organization create a significant risk. The following four question framework can help to organize threat modeling:
We define our system’s architecture, components, and data flows to understand what needs protection.
We identify potential vulnerabilities and threats—such as unauthorized access, data breaches, or service disruptions—that could compromise the system
We develop and implement mitigation strategies (like access controls, encryption, and regular patching) to reduce or eliminate identified risks.
We verify our defenses through testing, audits, and continuous monitoring to ensure that the implemented security measures are effective.
