Based on the following scenario, specify the suitable Architectural Pattern for the application with justification. Zain Company willing to launch "ZAIN Pay" for payment and money transaction services. The system shall have many levels of security. The first security level should provide two factors authentication: using password and SMS code. The authentication will lead to a display of a set of services. At this level, a "Sentinel" will monitor the user actions and behavior to detect a possible identity theft (by hackers for example). To prevent "man in the middle attach", all communications between the user and the system should be encrypted.

Based on the following scenario, specify the suitable Architectural Pattern for the application with justification. Zain Company willing to launch "ZAIN Pay" for payment and money transaction services. The system shall have many levels of security. The first security level should provide two factors authentication: using password and SMS code. The authentication will lead to a display of a set of services. At this level, a "Sentinel" will monitor the user actions and behavior to detect a possible identity theft (by hackers for example). To prevent "man in the middle attach", all communications between the user and the system should be encrypted.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Related questions

Q: What do the acronyms RBAC and ABAC represent, in the runtime context of applications and workloads?…

A: The above question is solved in step 2 :-

Q: Learn about the many categories for access control methods. Make a comparison and contrast of the…

A: Overview of Access Control Methods: Access control methods are essential in ensuring the security…

Q: The activity of one type of IDS begins with the generation of an alarm for each action. The…

A: Design of IDS has following advantages and disadvantages

Q: What exactly do you mean when you say "application security"? Give us a phrase that you can use to…

A: 1) Application security refers to the measures taken to secure software applications from external…

Q: What exactly do you mean when you say "application security"? Give us a phrase that you can use to…

A: Security is very important to safeguard your system components. It helps in brand building and…

Q: Please enumerate the essential components of a.NET security and explain why they are so vital. All…

A: The essential components of .NET security include authentication, authorization, code access…

Q: 1. Why should forms be protected? If a form is not protected, could users modify its structure and…

A: 1. Data is protected and made accessible in all situations thanks to data protection principles.…

Q: Please provide an example to illustrate why one of these four methods of access control could be…

A: Access control, a crucial component of data security, establishes who is allowed access to and uses…

Q: Please provide an example to illustrate why one of these four methods of access control could be…

A: Introduction: Access control is a security mechanism that is used to regulate who can access certain…

Q: You often make allusions to the final product while outlining the goals of the authentication…

A: What is computer security: Computer security refers to the protection of computer systems and…

Q: ods of access control are categorized. Examine and contrast the many different kinds of controls…

A: Introduction: The system with the strictest security measures is obligatory access control,…

Q: Explain how native authentication and authorization services are deployed step-by-step when a web…

A: Explain how native authentication and authorization services are deployed step-by-step when a web…

Q: Make up a scenario requiring login management and fully describe it. Identify several methods of…

A: The solution is given in the below step

Q: From the extended use case diagram, make the activity diagram of the same.

A: Activity diagram is like a flow chart which consists of activities performed by the system, but it…

Q: An access control lists describes Group of answer choices the access that identities may request…

A: Answer: the users that identities may request communication with when accessing the token.

Q: Provide a scenario where one of the four access control options may be employed. What makes this…

A: One scenario where discretionary access control (DAC) may be employed is in a small business setting…

Q: Not all activities fall into the area of a principle in which case you should state this in the…

A: We have to complete the attached table with the principles below relating to server security.

Q: Examine the methods for categorising access control methodologies. Discuss the many types of…

A: Three main types of access control systems are: Discretionary Access Control (DAC), Role Based…

Q: Create a situation in which one of the four access control strategies may be used. What sets this…

A: Access control strategies determine who or what is allowed to access or manipulate resources in a…

Q: Subject: Software Engineering An ATM’s PIN entry screen has been designed to display a warning…

A: Ques.1: An ATM’s PIN entry screen has been designed to display a warning message if the user pushes…

Q: Examine the procedures used to classify access control methods. Discuss the many sorts of controls…

A: Procedures used to classify access control method: Authorization: Cloud-based access control systems…

Q: 2. Consider the scenario where a Bank Server receives a funds transfer request from a user, Andy,…

A: Encryption is the process of converting plaintext into ciphertext, which is a scrambled version of…

Question

Based on the following scenario, specify the suitable Architectural Pattern for the
application with justification.
Zain Company willing to launch "ZAIN Pay" for payment and money transaction
services.
The system shall have many levels of security.
The first security level should provide two factors authentication: using password and
SMS code.
The authentication will lead to a display of a set of services. At this level, a "Sentinel"
will monitor the user actions and behavior to detect a possible identity theft (by hackers
for example).
To prevent "man in the middle attach", all communications between the user and the
system should be encrypted.
Finally, the Database will be protected and all the data will be stored encrypted.

Expert Solution

This question has been solved!

Explore an expertly crafted, step-by-step solution for a thorough understanding of key concepts.

This is a popular solution!

SEE SOLUTION Check out a sample Q&A here

Step 1

VIEW

Step 2

VIEW

Step 3

VIEW

Trending now

This is a popular solution!

Step by step

Solved in 3 steps with 1 images

SEE SOLUTION Check out a sample Q&A here

Knowledge Booster

Learn more about

Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.

Similar questions

Provide a scenario where one of the four access control options may be employed. What makes this option better than the others in its field?
Provide an example of how one of the four access control options may be implemented. What makes this option superior than others in the same field?
Match the description with the access control method. Based on access being determined by the owner of resource 1. Discretionary Based on access being determined by an authority 2. Mandatory 3. Role-based Based on access being determined by the role of the authority
User IDs and Group IDs are unique to each system and cannot be recycled. So, how accurate is this claim?
All of the following statements are true in regards to clipping levels except for which one? Activity below a clipping level is considered normal and expected When the clipping level is exceeded, a violation record may be recorded All abnormal activity, including intrusions, will cross a clipping level The use of clipping levels is considered a preventative technical access control method
You often make allusions to the final product while outlining the goals of the authentication procedure; however, could you provide more specifics? What are the pros and cons of using the various authentication methods now available?