Application Security Program Handbook A guide for software engineers and team leaders

about the technology

Application security is much more than a protective layer bolted onto your code. Real security requires coordinating practices, people, tools, technology, and processes throughout the life cycle of a software product. This book provides a reproducible, step-by-step road map to building a successful application security program.

about the book

The Application Security Program Handbook delivers effective guidance on establishing and maturing a comprehensive software security plan. In it, you’ll master techniques for assessing your current application security, determining whether vendor tools are delivering what you need, and modeling risks and threats. As you go, you’ll learn both how to secure a software application end to end and also how to build a rock-solid process to keep it safe.

what’s inside

• Application security tools for the whole development life cycle
• Finding and fixing web application vulnerabilities
• Creating a DevSecOps pipeline
• Setting up your security program for continuous improvement

about the reader

For software developers, architects, team leaders, and project managers.

about the author

Derek Fisher has been working in application security for over a decade, where he has seen numerous security successes and failures firsthand.