This document outlines the key steps in application security from design through deployment. It discusses integrating tools for vulnerability scanning, prioritizing findings while filtering false positives. It also covers various security testing techniques like static, dynamic, white box, and black box testing as well as passive and active security attacks. The goal is unified visibility and prioritization of risks through application security orchestration and correlation.

1. Design Dev Test
Production
Application Security
Orchestration & Correlation
Integrate tools & Import scan results
Prioritize findings & filter false
positive
Secured SDLC
Vulnerability Scanning/Bug Bounty , Penetration Testing
White Box and Black Box Security Testing
Static App security , Dynamic App security
Passive and Active Security Attacks
Vulnerability & Threats (Monitored execution)
Security Single Pane of Glass – Unified view of Security
Visibility of risks (Orchestration ) and prioritization of risks (Correlation)
Build
Application Security Orchestration & Correlation Pyramid
feedback
feedback
feedback
feedback
Deploy
IAST ( Interactive Application Security Testing)