The Secure Three-Tier Architecture Pattern

Fernández, Eduardo B.; Fonoage, Mihai; VanHilst, Michael; Marta, Mirela

doi:10.1109/cisis.2008.51

Cited by 14 publications

(4 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…To provide incentives to customers in real-time for sharing their data. This BBS has a 3-tier architecture (Fernandez et al, 2008) employing Spring Boot (https://spring.io/projects/spring-boot) and React (https://reactjs.org/) as the main building technologies. The system uses permissioned MultiChain as a solution to both on-chain and off-chain data storage, encryption, hashing and tracking of data, together with Ethereum.…”

Section: Blockchain-based System (Bbs)mentioning

confidence: 99%

Augmenting the technology acceptance model with trust model for the initial adoption of a blockchain-based system

Shrestha

Vassileva

Joshi³

et al. 2021

PeerJ Computer Science

View full text Add to dashboard Cite

Background In the collaborative business environment, blockchain coupled with smart contract removes the reliance on a central system and offers data integrity which is crucial when the transacting parties rely on the shared data. The acceptance of such blockchain-based systems is necessary for the continued use of the services. Despite many extensive studies evaluating the performance of blockchain-based systems, few have focused on users’ acceptance of real-life applications. Objective The main objective of this research is to evaluate the user acceptance of a real-life blockchain-based system (BBS) by observing various latent variables affecting the development of users’ attitudes and intention to use the system. It also aims to uncover the dimensions and role of trust, security and privacy alongside the primary Technology Acceptance Model (TAM)-based predictors and their causal relationship with the users’ behavior to adopt such BBS. Methods We tested the augmented TAM with Trust Model on a BBS that comprises two subsystems: a Shopping Cart System (SCS), a system oriented towards end-users and a Data Sharing System (DSS), a system oriented towards system administrators. We set research questions and hypotheses, and conducted online surveys by requesting each participant to respond to the questionnaire after using the respective system. The main study comprises two separate sub-studies: the first study was performed on SCS and the second on DSS. Furthermore, each study data comprises initial pre-test and post-test data scores. We analyzed the research model with partial least square structural equation modelling. Results The empirical study validates our research model and supports most of the research hypotheses. Based on our findings, we deduce that TAM-based predictors and trust constructs cannot be applied uniformly to BBS. Depending on the specifics of the BBS, the relationships between perceived trust antecedents and attitudes towards the system might change. For SCS, trust is the strongest determinant of attitudes towards system, while DSS has perceived privacy as the strongest determinant of attitudes towards system. Quality of system shows the strongest total effect on intention to use SCS, while perceived usefulness has the strongest total effect on intention to use DSS. Trust has a positive significant effect on users’ attitudes towards both BSS, while security does not have any significant effect on users’ attitudes toward BBS. In SCS, privacy positively affects trust, but security has no significant effect on trust, whereas, in DSS, both privacy and security have significant effects on trust. In both BBS, trust has a moderating effect on privacy that correlates with attitudes towards BBS, whereas security does not have any mediating role between privacy and attitudes towards BBS. Hence, we recommend that while developing BBS, particular attention should be paid to increasing user trust and perceived privacy.

show abstract

Section: Blockchain-based System (Bbs)mentioning

confidence: 99%

Augmenting the technology acceptance model with trust model for the initial adoption of a blockchain-based system

Shrestha

Vassileva

Joshi³

et al. 2021

PeerJ Computer Science

View full text Add to dashboard Cite

show abstract

“… To provide incentives to customers in real-time for sharing their data. This BBS has a 3-tier architecture (Fernandez, Fonoage, VanHilst, & Marta, 2008) employing Spring Boot 1 and React 2 as the main building technologies. The system uses permissioned MultiChain as a solution to both on-chain and off-chain data storage, encryption, hashing and tracking of data, together with Ethereum.…”

Section: Blockchain-based System (Bbs)mentioning

confidence: 99%

Peer Review #3 of "Augmenting the technology acceptance model with trust model for the initial adoption of a blockchain-based system (v0.1)"

Ziaur¹

2021

View full text Add to dashboard Cite

Background. In the collaborative business environment, blockchain coupled with smart contract removes the reliance on a central system and offers data integrity which is crucial when the transacting parties rely on the shared data. The acceptance of such blockchain-based systems is necessary for the continued use of the services. Despite many extensive studies evaluating the performance of blockchainbased systems, few have focused on users' acceptance of real-life applications.Objective. The main objective of this research is to evaluate the user acceptance of a real-life blockchain-based system (BBS) by observing various latent variables affecting the development of users' attitudes and intention to use the system. It also aims to uncover the dimensions and role of trust, security and privacy alongside the primary Technology Acceptance Model (TAM)-based predictors and their causal relationship with the users' behavior to adopt such BBS. Methods.We tested the augmented TAM with Trust Model on a BBS that comprises two subsystems: a Shopping Cart System (SCS), a system oriented towards end-users and a Data Sharing System (DSS), a system oriented towards system administrators. We set research questions and hypotheses, and conducted online surveys by requesting each participant to respond to the questionnaire after using the respective system. The main study comprises two separate sub-studies: the first study was performed on SCS and the second on DSS. Furthermore, each study data comprises initial pre-test and post-test data scores. We analyzed the research model with partial least square structural equation modelling.Results. The empirical study validates our research model and supports most of the research hypotheses. Based on our findings, we deduce that TAM-based predictors and trust constructs cannot be applied uniformly to BBS. Depending on the specifics of the BBS, the relationships between perceived trust antecedents and attitudes towards the system might change. For SCS, trust is the strongest determinant of attitudes towards system, while DSS has perceived privacy as the strongest determinant of attitudes towards system. Quality of system shows the strongest total effect on intention to use SCS, while perceived usefulness has the strongest total effect on intention to use DSS. Trust has a positive significant effect on users' attitudes towards both BSS, while security does not have any significant effect on users' attitudes toward BBS. In SCS, privacy positively affects trust, but security has no significant effect on trust, whereas, in DSS, both privacy and security have significant effects on trust. In both BBS, trust has a moderating effect on privacy that correlates with attitudes towards BBS, whereas security does not have any mediating role between privacy and attitudes towards BBS. Hence, we recommend that while developing BBS, particular attention should be paid to increasing user trust and perceived privacy.

show abstract

“…Security patterns capture proven security solutions to known security problems. Much work has gone towards identifying security patterns [9,10], while other work focuses on summarizing catalogues of security patterns [11,2,3]. In total, there are more than 100 security patterns.…”

Section: Security Patternsmentioning

confidence: 99%

Integrating Security Patterns with Security Requirements Analysis Using Contextual Goal Models

Horkoff

Mylopoulos

2014

Lecture Notes in Business Information Processing

View full text Add to dashboard Cite

International audienceSecurity patterns capture proven security knowledge to help analysts tackle security problems. Although advanced research in this field has produced an impressive collection of patterns, they are not widely applied in practice. In parallel, Requirements Engineering has been increasing focusing on security-specific issues, arguing for an upfront treatment of security in system design. However, the vast body of security patterns are not integrated with existing proposals for security requirements analysis, making them difficult to apply as part of early system analysis and design. In this paper, we propose to integrate security patterns with our previously introduced goal-oriented security requirements analysis approach. Specifically, we provide a full concept mapping between textual security patterns and contextual goal models, as well as systematic instructions for constructing contextual goal models from security patterns. Moreover, we propose a systematic process for selecting and applying security patterns, illustrated with a realistic smart grid scenario. To facilitate the practical adoption of security patterns, we have created contextual goal models for 20 security patterns documented in the literature, and have implemented a prototype tool to support our proposal

show abstract

The Secure Three-Tier Architecture Pattern

Cited by 14 publications

References 10 publications

Augmenting the technology acceptance model with trust model for the initial adoption of a blockchain-based system

Augmenting the technology acceptance model with trust model for the initial adoption of a blockchain-based system

Peer Review #3 of "Augmenting the technology acceptance model with trust model for the initial adoption of a blockchain-based system (v0.1)"

Integrating Security Patterns with Security Requirements Analysis Using Contextual Goal Models

Contact Info

Product

Resources

About