16
Application Software Security
Manage the security life cycle of in-house developed, hosted, or acquired software to prevent, detect, and remediate security weaknesses before they can impact the enterprise.
Why Is This Control Critical?
Attacks often take advantage of vulnerabilities found in web-based and other application software. Vulnerabilities can be caused by coding mistakes, logic errors, incomplete requirements, and failure to test for unusual or unexpected conditions. Sophisticated attackers can find and exploit such vulnerabilities. Application security includes techniques such as security requirements, secure design, secure coding, secure deployment, vulnerability scanning, and web application firewalls.