management and vulnerability management. Application security DiD
measures operate predominately by using boundary protections to recognize
and block attack patterns, and using constrained execution environments to
isolate vulnerable applications, thus minimizing their exposure to attackers