88% of respondents use online communities as their primary learning method. See what else they had to say about the state of dev today.

Apache Cassandra combines the benefits of major NoSQL databases to support data management needs not covered by traditional RDBMS vendors.

Dive into developer experience: Without getting ownership right, teams struggle with accountability and inconsistent engineering standards.

The transition to Quickwit: Learn how to migrate your search engine, including how to overcome key engineering and architectural hurdles.

Look Inside

DZone's Guide to

Application Security

The DZone Guide to Application Security addresses modern software vulnerabilities and describes strategies that developers can use to build more secure applications. It covers common security flaws, OWASP tools and guidelines, and general methods for coding securely.

Free 30-page ebook

DZone Member Feedback

"Application security is a priority in my projects (as it should be in anyone's project) so any insight I can glean from other people is immensely valuable. Besides, I passed the guide along to my CSO and he loved it."

Hendry Betts , DZone Reader

"It's a really good guide to share with development teams and make them understand the need and importance of security."

Prasad Pokala , DZone Reader

"Amazing guide to get everyone thinking about the best time to implement security...before you deploy it."

Jose Gonzalez , DZone Reader

"An excellent guide of modern Application Security issues."

Harry Geller , DZone Reader

Table of Contents

2

Letter From the Editor

3

Executive Summary

4

Key Research Findings

6

Ten Steps To Securing Your Software

9

Diving Deeper Into The Application Security Ecosystem

10

The Developer's Security Toolchain

14

Introducing Security Flaws At Agile Speed

18

Attacking The Client

20

Learn To Hack Your Own Code

22

Application Security Executive Insights

24

The Secure Application Checklist

25

Solutions Directory

29

Glossary

Featured Authors

Jim Bird

Experienced software development manager, project manager & CTO

John Melton

Principal Security Researcher at WhiteHat Security

Tony Rice

DevSecOps Engineer for Cisco's Critical Business Software

Chris Lamb

Cyber-Security Research Scientist at Sandia National Laboratories

Sherif Koussa

Founder and Director of Web & Mobile Application Security Services at Software Secured

Tom Smith

Help companies use data and technology to improve UX/CX while reducing costs.

Interactive Preview

Download

Publications

Featured
Latest
Popular