Both concepts are naturally different. Software security refers to the security of the software itself, whereas application security refers to the overall security of the application. Security of data processed by software and security of communications with other systems over networks are both types of application security.