Application security (short AppSec ) includes all tasks that introduce a secure software development life cycle to development teams. Its final goal is to improve security practices and, through that, to find, fix and preferably prevent security issues within applications. It encompasses the whole application life cycle from requirements analysis, design, implementation, verification as well as maintenance. [1]
Different approaches will find different subsets of the security vulnerabilities lurking in an application and are most effective at different times in the software lifecycle. They each represent different tradeoffs of time, effort, cost and vulnerabilities found.
Web application security is a branch of information security that deals specifically with the security of websites , web applications , and web services . At a high level, web application security draws on the principles of application security but applies them specifically to the internet and web systems. [2] [3]