Security areas
As mentioned earlier, security is not only limited to the application’s code, nor can it only be achieved by implementing authentication, although these areas are very important.
Let’s first start by highlighting the key areas involved in securing an application throughout its lifecycle. It is important for me to make this point (or reminder) here as I still meet with customers who introduce security too late in the lifecycle of an application (typically after the application has been developed and released to production), expecting security professionals to do miracles and secure the application with minimal or no modification to the application, which is, obviously, unrealistic.
Always keep in mind that security should span the entire lifecycle of the application. In concrete terms, security should be a concern from the early stages of designing the application:
- In the design phase: It is important to define security requirements and objectives...
