p. 395

2-4-4 Application Security

Application security is a general name for security against attacks that exploit vulnerabilities (i.e., security holes) in application software. Application security includes secure programming that implements security functions in the process of programming. As an example of such functions, there is a function that places restrictions on data written out to the buffer area of a program, in order to increase protection against “buffer overflow attacks” that improperly write data in excess of its buffer size.