I am doing research for a post-graduate project. It generally involves security and distributed server network. Project will aim for speed, scalability and safety and I am looking for a framework to create web service(s) running on each node.
There are 4 main requirements for that framework with which I want to build proof of concept:
- it must be fast - idea is that it has to be efficient and while I aim for scalability, I don't want to add another server just because 50 requests per second freezes the whole server,
- it must work with JVM - I got some experience with Java SE, Spring Framework, Clojure, Groovy and I am currently learning Scala. It will be easier to create something solid with Java stack than with e.g. .Net I know nothing about,
- it must be safe - though I have Computer Security Master at my disposal and whole thing will be reviewed, I know that there will be some security issues with my code I'll have to address, and I don't want to be burdened with too many framework's/container's security problems as well,
- it should be easy to develop - we already know that development with e.g. Spring can be a pain and a bottleneck unless you know awfully lot about the framework. I heard that Play Framework is much better in this regard but can I consider it safe?
I am not planning to expose any sort of web user interface, so any HTML5, LESS and CMS scaffolding is unimportant. API will be made with client applications in mind.
Besides that could you recommend some books/articles about developing secure code with Java? At some point I learnt that e.g. you cannot store sensitive data within String and I found some nice articles at the internet but I'm sure there will be a lot of other important pieces of information required to create secure Java code.