Projeto e Implementação de um Serviço Web RESTful com Técnicas de Segurança

Abstract

Software systems have been target of attacks in several fields and different types of systems. Research results show the importance of security in IT field and the delivery of products to clients that attend to satisfactory security requirements. Web systems are included because they connect people all over the world and they are part of our daily life. Not only security specialists, but also developers are responsible for using security techniques, adding this practice to the software development lifecycle. In this context, this work presents, besides a review about Web systems history and security concepts, the project and implementation of a real RESTful Web system with security techniques to evaluate functional and non functional requirements on the server-side, using Spring as the main framework Web. Additionally, this study presents an evaluation of using security proactive controls on Você Digital project for Tribunal de Contas do Estado da Paraíba (TCE-PB).