Consideraciones de Arquitectura de Software a nivel de Diseño Arquitectónico y Desarrollo de Software para minimizar vulnerabilidades en aplicaciones web basados en OWASP Top Ten 2013, caso de estudio arquitectura: 3-Layers

Abstract

Abstract:This research Project was focused on the analysis and prevention of vulnerabilities named "Broken Authentication Session Management" and "Unvalidated Redirects" and Forwards that are listed in The OWASP, this kind of vulnerabilities may be present in web applications, putting in high risk the integrity, availability and confidentiality of data; To do the analysis I used a prototype under the scheme of architectural style 3-Layers in which I applied techniques and recommendations OWASP, also I implemented in it the security framework named Apache Shiro, design patterns like FACADE and DAO, with the main objective of preventing vulnerabilities mention above and thus ensure safety in terms of authentication and authorization of end users. As the last phase of the reseach project, the prototype was validated with tools designed for evaluation and in a more personal way by the developer, I did this both at the level of architectural design, and writing code to check the quality of the software that was validated.