Application security encompasses measures taken throughout the
application's life-cycle to prevent exceptions in the security policy of
an application or the underlying system (vulnerabilities) through flaws
in the design, development, deployment, upgrade, or maintenance of the
application. Applications only control the use of resources granted to
them, and not which resources are granted to them. They, in turn,
determine the use of these resources by users of the application through
application security.