Application Security A Cybersecurity Component Training Ppt

Slide 2

This slide gives information about application security. Application security is developing, adding, and testing security features in applications to prevent security vulnerabilities against threats like unauthorized access and modification.

Slide 3

This slide discusses the importance of application security. Modern applications are more susceptible to security attacks and breaches since they are usually accessible over many networks and are connected to the cloud.

Slide 4

This slide gives information about application security controls. Application security controls strengthen an application's coding-level security, reducing its vulnerability to attackers.

Slide 5

This slide tells us about preventative controls in application security. Preventative measures are taken to stop attacks from taking place and guard against vulnerabilities.

Slide 6

This slide discusses corrective controls in application security. Corrective controls include using virtual computers, terminating dangerous or vulnerable applications, or patching software to fix vulnerabilities.

Slide 7

This slide tells us about detective controls in application security. Detective controls are essential for a comprehensive application security architecture because these can, sometimes, be the sole means through which security experts determine an attack's occurrence

Slide 8

This slide highlights the types of application security. These are authentication, authorization, encryption, logging, and application security testing.

Slide 9

This slide talks about authentication as a type of application security. Authentication is when programmers build security procedures into their applications to guarantee that only authorized users may access these.

Slide 10

This slide discusses authorization as a type of application security. Following authentication, a user may be permitted to use the application. The system confirms that the user can use the program by comparing the user's identity to a list of authorized users

Slide 11

This slide talks about encryption as a type of application security. Sensitive data can be protected by encrypting the traffic between the end-user and the cloud in cloud-based apps.

Slide 12

This slide discusses logging as a type of application security. Logging can help investigate a security breach in an application; it reveals who had access to the data and how.

Slide 13

This slide gives us information about application testing and tools. Application security testing ensures that all security controls are functioning efficiently and effectively. 

Slide 14

This slide highlights types of application security testing. These are Static Application Security Testing, Dynamic Application Security Testing, Interactive Application Security Testing, and Run-time Application Security Protection.

Slide 15

This slide talks about Static Application Security Testing (SAST). SAST assists in the detection of code vulnerabilities as it looks for the underlying cause in the application source files.

Slide 16

This slide talks about Dynamic Application Security Testing (DAST). DAST is a more proactive strategy, simulating security breaches on a live web application to provide precise information about exploitable vulnerabilities

Slide 17

This slide talks about Interactive Application Security Testing (IAST). IAST combines characteristics of SAST and DAST. It conducts an analysis from within the application in real-time or at any point during the development or production process

Slide 18

This slide talks about Runtime Application Security Protection (RASP). RASP functions within the application as well, but its main concern is security rather than testing.

Slide 19

This discusses application security on cloud. Application security in the cloud poses some enhanced risks. Since cloud environments offer shared resources, special attention must be given to ensure that users have access to the information they are authorized to view in their cloud-based applications.

Slide 20

This slide tells us about mobile application security. Mobile devices are more vulnerable to attacks since they send and receive data over the internet instead of a private network.

Slide 21

This slide discusses web application security. Web application security is meant for web applications or services that users access through a browser interface on the internet.

Instructor’s Notes: A web application firewall works by inspecting and, if necessary, blocking data packets considered harmful.