Application Security

Application security is the subdiscipline of cybersecurity devoted to protecting software applications from threats and vulnerabilities through the systematic application of security principles, practices, and technologies throughout the application lifecycle.

3.7K

Publications

211.8K

Citations

9.1K

Authors

1.8K

Institutions

Publications per year

2017–2026

1.5K

Variants

Appsec

Parents

Cybersecurity

Children

Access ControlApi SecurityApplication Security TestingAuthorizationCloud Application SecurityCode Review For SecurityConfiguration ManagementContainer SecurityCross-site Request ForgeryCross-site Scripting

Publications

3.7K

Diglossia

Charles A. Ferguson · WORD · 1959 · 2.9K citations · Full text

Computing, Computer Science, Cybersecurity +13

Intrusion detection using sequences of system calls

Steven Hofmeyr, Stephanie Forrest, Anil Somayaji · Journal of Computer Security · 1998 · 1.3K citations

Computing, Computer Science, Computer Systems +16

Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software

James Newsome, Dawn Song · Figshare · 2018 · 1.3K citations · Full text

Computing, Computer Science, Cybersecurity +15

Android permissions demystified

Adrienne Porter Felt, Erika Chin, Steve Hanna et al. · 2011 · 1.3K citations

Computing, Computer Systems, Cybersecurity +17

CryptDB

Raluca Ada Popa, Catherine M. S. Redfield, Nickolai Zeldovich et al. · 2011 · 1.1K citations · Full text

Computing, Computer Science, Cybersecurity +16

1–5 of 3.7K

Authors

9.1K

CK
Christopher Kruegel
University of California, Santa Barbara, United States
35 publications · 3.5K citations
27
h-index
YL
Yang Liu
Nanyang Technological University, Singapore
39 publications · 2.1K citations
25
h-index
GV
Giovanni Vigna
University of California, Santa Barbara, United States
29 publications · 3.1K citations
23
h-index
LL
Li Li
Monash University, Australia
29 publications · 2.1K citations
22
h-index
XL
Xiapu Luo
Hong Kong Polytechnic University, Hong Kong SAR China
26 publications · 1.4K citations
20
h-index

1–5 of 9.1K

Institutions

1.8K

1–8 of 1.8K

Venues

Computers & Security
76 publications · 4.2K citations
39
h-index
IEEE Access
47 publications · 2.1K citations
27
h-index
arXiv (Cornell University)
Repository · 69 publications · 2.8K citations
26
h-index
IEEE Transactions on Software Engineering
TSE · 38 publications · 1.6K citations
24
h-index
IEEE Transactions on Dependable and Secure Computing
TDSC · 31 publications · 1.8K citations
24
h-index

1–5

See also Application Security
Core Methods	Patch Management Static Application Security Testing Dynamic Application Security Testing Interactive Application Security Testing Web Application Firewalls Runtime Application Self-protection Software Bill Of Materials Threat Modeling Penetration Testing Code Review For Vulnerabilities Vulnerability Scanning Secure Coding Practices Input Validation Output Encoding Secure Software Development Lifecycle Configuration Management
Security Testing	Static Application Security Testing Dynamic Application Security Testing Penetration Testing Security Regression Testing Fuzz Testing Black-box Fuzzing White-box Fuzzing Runtime Instrumentation Vulnerability Assessment Automated Penetration Testing Web Vulnerability Assessment Black-box Testing
Security Controls	Access Control Patch Management Input Validation Code Review Policy-based Access Control Adaptive Authentication Multi-factor Authentication Process Isolation Least Privilege System Call Filtering Sandboxing Application Logging Static Application Security Testing Dynamic Application Security Testing Interactive Application Security Testing Web Application Firewalls Runtime Application Self-protection
Lifecycle Integration	Risk Analysis Patch Management Secure Software Development Lifecycle Secure Development Life Cycle Security By Design Static Application Security Testing Penetration Testing Security Regression Testing Dynamic Taint Analysis Fuzz Testing Secure Coding Practices Dynamic Application Security Testing Interactive Application Security Testing Runtime Application Self-protection Web Application Firewalls Software Bill Of Materials
Threat Models	Threat Modeling Adversary Model Stride Attack Trees Misuse Cases Pasta Threat Modeling Linddun Data Flow Diagrams