Application Security: From the Ground Up