01 Application Security Fundamentals - part 1 - introduction and goals
0 likes443 views
This document discusses application security fundamentals and outlines various threats including script kiddies, hacktivists, hackers, cyber criminals, and advanced persistent threats. It then discusses the goals of application security which are confidentiality, integrity, and availability. Finally, it introduces the application security hierarchy which includes goals, mechanisms, and principles to guide security decisions and techniques.
1 of 5
More Related Content
What's hot (20)
Ad
Similar to 01 Application Security Fundamentals - part 1 - introduction and goals (20)
Ad
More from appsec (12)
Recently uploaded (20)
01 Application Security Fundamentals - part 1 - introduction and goals
- 2. Agenda PART 1 The Threats Goals and Principles of Application Security PART 2 Security Mechanisms
- 3. Application Security Threats Script Kiddie • Leveraging tools and exploits created by others • Hacking by pushing the big red shiny button Hacktivist • Hacker with a cause • Denial of service, site defacement Hacker • Malicious and non-malicious • Because they can Cyber Criminal • Different levels of sophistication • Scams, information theft, fraud Advanced Persistent Threat • Extremely sophisticated attackers; nation-states • Low & slow, information theft, espionage
- 4. Application Security Goals onfidentiality ntegrity vailability Information is only available to those who should have access Data is known to be correct and trusted Information is available for use by legitimate users when it is needed
- 5. Application Security Hierarchy guiding concepts that aid in making security decisions Confidentiality Integrity Availability Goals Mechanisms Principles secure coding techniques