Application security encompasses measures taken throughout the code’s life-cycle to prevent gaps in the security policy of an application or the underlying system (vulnerabilities) through flaws in the design  development  deployment  upgrade  or maintenance or database of the application