Avaliação dos aspectos técnicos dos principais riscos de segurança e ataques em aplicação web

Abstract

In view of the emergence of new applications on the web, the exposure of these tools also grows, since the web is an environment with less control when compared to traditional and centralized applications, increasing the chances of attacks and security risks. This work aims to carry out a survey framing the technical aspects of the main security risks and attacks in web applications, discuss them and analyze techniques to mitigate or eliminate such risks and attacks. The methodology, of an exploratory and experimental nature, made it possible to deepen the basic concepts necessary for the reader to understand the problem and the objective of this technical report, as well as to present, in practice, how some of these attacks occur and how to avoid them. This work was divided into two parts that deal with the mentioned subjects. The first chapter brings all the theoretical framework relevant to the understanding of how a web application works and lists the main attacks and vulnerabilities ranked by a globally recognized community as the first step to develop a web application in a secure way. In the second chapter, the application developed as an object of research is presented to the reader, in order to demonstrate how some of the attacks, raised during the theoretical foundation, occur, serving as a basis for web application developers to base themselves on the results presented in order to to create more secure software.