This document discusses application security fundamentals and outlines various threats including script kiddies, hacktivists, hackers, cyber criminals, and advanced persistent threats. It then discusses the goals of application security which are confidentiality, integrity, and availability. Finally, it introduces the application security hierarchy which includes goals, mechanisms, and principles to guide security decisions and techniques.

1. Application Security
Fundamentals
PART 1

2. Agenda
PART 1
 The Threats
 Goals and Principles of Application Security
PART 2
 Security Mechanisms

3. Application Security Threats
Script Kiddie
• Leveraging tools and exploits created by others
• Hacking by pushing the big red shiny button
Hacktivist
• Hacker with a cause
• Denial of service, site defacement
Hacker
• Malicious and non-malicious
• Because they can
Cyber Criminal
• Different levels of sophistication
• Scams, information theft, fraud
Advanced Persistent Threat
• Extremely sophisticated attackers; nation-states
• Low & slow, information theft, espionage

4. Application Security Goals
onfidentiality
ntegrity
vailability
Information is only available to
those who should have access
Data is known to be correct and
trusted
Information is available for use by
legitimate users when it is needed

5. Application Security Hierarchy
guiding concepts that aid in
making security decisions
Confidentiality
Integrity
Availability
Goals
Mechanisms
Principles
secure coding techniques