Challenges Facing Application Security Efforts

Lack of Attention

• Overshadowed by infrastructure, OS, admin practices

• Harder to develop specific best-practices (OWASP, use cases)

Hard to See the Forest because of the Trees

• Tendency to think of the components of the application

• Tendency to treat apps as circumscribed entities

Need for a Holistic Approach

• Address the application as an end-to-end experience

• Helps to identify risks