Application Security

  1. Foundational Security Principles
    1. Principle of Least Privilege
      1. User Access Management
        1. Application Permissions
          1. Service Account Privileges
            1. Temporary Access Controls
            2. Defense in Depth
              1. Multiple Security Layers
                1. Complementary Controls
                  1. Redundancy Planning
                    1. Failure Isolation
                    2. Fail Securely
                      1. Secure Default States
                        1. Error Handling Strategies
                          1. Graceful Degradation
                            1. Recovery Mechanisms
                            2. Separation of Duties
                              1. Role Segregation
                                1. Environment Separation
                                  1. Administrative Controls
                                    1. Approval Workflows
                                    2. Secure by Default
                                      1. Default Configurations
                                        1. Minimal Installation
                                          1. Disabled Unnecessary Features
                                            1. Secure Initial States
                                            2. Input Validation Principles
                                              1. Never Trust User Input
                                                1. Server-Side Validation
                                                  1. Client-Side Validation Limitations
                                                    1. Data Sanitization
                                                    2. Security Through Simplicity
                                                      1. Avoiding Unnecessary Complexity
                                                        1. Clear Security Models
                                                          1. Maintainable Security Controls
                                                            1. Usability Considerations

                                                          Previous

                                                          1. Introduction to Application Security

                                                          Go to top

                                                          Next

                                                          3. Secure Software Development Lifecycle