I agree with you. More or less each one of those topics could become a treaty on the subject. Thinking broadly, one could look at security from the programming

I agree with you. More or less each one of those topics could become a treaty on the subject. Thinking broadly, one could look at security from the programming point-of-view but also from applications point-of-view, where one understands the concepts behind each issue not necessarily having to know deeper software structures to work or handle security aspects.