Application Security

  1. Secure Deployment and Operations
    1. Environment Hardening
      1. Server Hardening
        1. Operating System Hardening
          1. Service Configuration
            1. Access Control Implementation
            2. Application Server Hardening
              1. Web Server Configuration
                1. Application Server Settings
                  1. Runtime Environment Security
                  2. Database Hardening
                    1. Database Configuration
                      1. Access Control Setup
                        1. Encryption Implementation
                        2. Network Hardening
                          1. Firewall Configuration
                            1. Network Segmentation
                              1. Protocol Security
                            2. Container Security
                              1. Container Image Security
                                1. Base Image Selection
                                  1. Image Scanning
                                    1. Vulnerability Management
                                    2. Container Runtime Security
                                      1. Runtime Protection
                                        1. Resource Limitations
                                          1. Privilege Management
                                          2. Container Orchestration Security
                                            1. Kubernetes Security
                                              1. Service Mesh Security
                                                1. Secret Management
                                              2. Infrastructure as Code Security
                                                1. IaC Template Security
                                                  1. Security Policy as Code
                                                    1. Template Scanning
                                                      1. Configuration Validation
                                                      2. IaC Pipeline Security
                                                        1. Secure Deployment Pipelines
                                                          1. Automated Security Checks
                                                            1. Compliance Validation
                                                          2. Web Application Firewall
                                                            1. WAF Deployment Models
                                                              1. Network-Based WAF
                                                                1. Host-Based WAF
                                                                  1. Cloud-Based WAF
                                                                  2. WAF Rule Management
                                                                    1. Signature-Based Rules
                                                                      1. Behavioral Rules
                                                                        1. Custom Rule Development
                                                                        2. WAF Evasion and Bypass
                                                                          1. Common Evasion Techniques
                                                                            1. WAF Testing
                                                                              1. Rule Tuning
                                                                            2. Runtime Application Protection
                                                                              1. Runtime Application Self-Protection
                                                                                1. RASP Technology
                                                                                  1. Integration Methods
                                                                                    1. Performance Considerations
                                                                                    2. Application Performance Monitoring
                                                                                      1. Security Event Monitoring
                                                                                        1. Anomaly Detection
                                                                                          1. Real-Time Alerting

                                                                                      Previous

                                                                                      10. Common Vulnerability Categories

                                                                                      Go to top

                                                                                      Next

                                                                                      12. Vulnerability Management and Incident Response