To achieve proper application security, you must ensure your protections act against active and relevant threats.