Application Security

  1. Third-Party Component Security
    1. Software Composition Analysis
      1. Dependency Discovery
        1. Direct Dependencies
          1. Transitive Dependencies
            1. Shadow Dependencies
            2. Vulnerability Assessment
              1. Known Vulnerability Databases
                1. Vulnerability Scoring
                  1. Risk Prioritization
                  2. License Compliance
                    1. Open Source License Types
                      1. License Compatibility
                        1. Compliance Tracking
                      2. Dependency Management Strategies
                        1. Dependency Selection Criteria
                          1. Security Track Record
                            1. Maintenance Status
                              1. Community Support
                              2. Version Management
                                1. Pinning Versions
                                  1. Update Strategies
                                    1. Rollback Procedures
                                    2. Vulnerability Remediation
                                      1. Patch Management
                                        1. Alternative Solutions
                                          1. Workaround Strategies
                                        2. Supply Chain Security
                                          1. Software Supply Chain Risks
                                            1. Compromised Dependencies
                                              1. Malicious Packages
                                                1. Build System Attacks
                                                2. Supply Chain Protection
                                                  1. Package Verification
                                                    1. Build Reproducibility
                                                      1. Dependency Signing

                                                  Previous

                                                  6. Language-Specific Security Considerations

                                                  Go to top

                                                  Next

                                                  8. Secrets Management