measures. Application security protections and mitigations are specified almost
exclusively at the level of the system and network architecture rather than the
individual application’s software architecture. They are primarily implemented
during the application’s deployment and operation.