A New Approach to Application Security