Desdobramento de segurança em soa na prototipagem do sistema de monitoria e emissão de dados estatísticos de funcionários da UEM no quadro de formação

Abstract

In recent days, changes in organizations, technologies and business processes have somehow changed people's lives. In this context, the Eduardo Mondlane University is no exception. The development of applications based on Service Oriented Architecture (SOA) ensures that there is interoperability between heterogeneous environments and platforms, maximizes the sharing of features between applications, which consequently increases the reuse rate. This fact enables organizations to react to market needs in a more agile and efficient way. However, along with these advantages come the security challenges that exist in systems based on SOA and Web Services, the latter being the most common and recommended technology for implementing an SOA. Due to the dynamism of the SOA approach and the extreme approach to the reality of the business environment, it is very common that there are intermediary services in various processes, thus the security mechanism that best suits is message level security, which was incorporated in this thesis using the WS-Security security standard to ensure authentication, confidentiality. integrity and non-repudiation of messages. WS-Security was implemented using Mutual Certificates Security (MCS) technology. It is in this context that the work appears and it is expected that the work will facilitate the monitoring process of UEM employees in the training framework and, above all, allow the process of issuing statistical data to be done in a fast, dynamic and safe way. . The prototype also provides that partners or bodies with valid digital certificates can consume the statistical data relating to UEM employees in the training framework directly from their applications, regardless of the platform or language used by. these are without human intervention.