Deloitte interview question

How to apply security on RESTful web services