Inexorable trends are pushing security to the application layer. Web apps are low-hanging fruit for attackers, and the move to cloud and mobile computing increases the criticality of application security. The session covers new thinking about application monitoring, focusing on how applications can be “instrumented” to proactively detect security issues and record security-relevant logs.