Consideraciones de Arquitectura de Software a nivel de Diseño Arquitectónico y Desarrollo de Software para minimizar vulnerabilidades en aplicaciones web basados en OWASP Top Ten 2013, caso de estudio arquitectura: SOA.

Abstract

Services orientation allow the integration and automating process of business the same as being available on the network are vulnerable to suffer any type of attack, there are some organization as OWASP responsable of raising awareness to the developers in the creation of a secure software and the quality through the use of standards and recommendations to avoid vulnerabilities. The present work was focus on the implementation of a prototype to reduce vulnerabilities such as: SQL Injection, XSS and exposure of sensitive data in web applications built under SOA using MVC as architectural pattern, Facade and DAO as design patterns, and principles and best practices given by OWASP to writing secure code, through Java EE configure the Glassfish Server and WS-Security specification. Finally, the prototype was validate with tools such as: Structural Analysis for Java, SonarQube, OWASP, Vega and Wireshark, to analyze the quality of the prototype in terms of coding, design and security to counteract the vulnerability type’s.