{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T19:00:45Z","timestamp":1784833245814,"version":"3.55.0"},"reference-count":37,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T00:00:00Z","timestamp":1780444800000},"content-version":"vor","delay-in-days":2,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Secretariat of Science, Humanities, Technology and Innovation","award":["MADTEC-2025-M-478"],"award-info":[{"award-number":["MADTEC-2025-M-478"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2026,6]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>\n                    End-to-end applications (\n                    <jats:italic>E2E-Apps<\/jats:italic>\n                    ) are essential for secure and seamless data exchange in scenarios like cloud-based data sharing and decentralized environments. However, they face challenges adapting to changing requirements, integrating security, computing, and storage services, and managing resources effectively in dynamic environments. This paper introduces\n                    <jats:italic>CIATfunc<\/jats:italic>\n                    , a framework for composing\n                    <jats:italic>Secure End-to-End applications<\/jats:italic>\n                    (\n                    <jats:italic>SecE2E-Apps<\/jats:italic>\n                    ) by addressing these challenges through the combination of\n                    <jats:italic>Policy-as-Code<\/jats:italic>\n                    for defining high-level security requirements with\n                    <jats:italic>Infrastructure-as-Code<\/jats:italic>\n                    for automating resource provisioning and management. This integration ensures secure, scalable, and efficient workflows tailored to specific needs. The\n                    <jats:italic>CIATfunc<\/jats:italic>\n                    framework was validated through a controlled evaluation and a case study involving the secure exchange of tomographic imagery between valid users and registering transactions in a blockchain (\n                    <jats:italic>BC<\/jats:italic>\n                    ). Results demonstrated its capability to build customized and traceable\n                    <jats:italic>SecE2E-Apps<\/jats:italic>\n                    while significantly improving performance through parallel execution of security tasks and efficient resource management.\n                  <\/jats:p>","DOI":"10.1007\/s10586-026-06108-7","type":"journal-article","created":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T17:47:23Z","timestamp":1780508843000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["CIATfunc: a frame-based serverless framework for composing secure end-to-end applications"],"prefix":"10.1007","volume":"29","author":[{"given":"Ignacio","family":"Castillo-Barrios","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ricardo A.","family":"Ibarra-Garcia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jose Luis","family":"Gonzalez-Compean","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Arturo","family":"Diaz-Perez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ivan","family":"Lopez-Arevalo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miguel","family":"Morales-Sandoval","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jose Juan","family":"Garcia-Hernandez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Heriberto","family":"Aguirre Meneses","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marco Antonio","family":"N\u00fa\u00f1ez Gaona","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,3]]},"reference":[{"key":"6108_CR1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2023.111942","volume":"210","author":"S Moreschini","year":"2024","unstructured":"Moreschini, S., Younesian, E., H\u00e4stbacka, D., Albano, M., Ho\u0161ek, J., Taibi, D.: Edge to cloud tools: A multivocal literature review. J. Syst. Softw. 210, 111942 (2024)","journal-title":"J. Syst. Softw."},{"key":"6108_CR2","doi-asserted-by":"publisher","first-page":"143","DOI":"10.1016\/j.jss.2017.10.004","volume":"135","author":"J Gonzalez-Compean","year":"2018","unstructured":"Gonzalez-Compean, J., Sosa-Sosa, V., Diaz-Perez, A., Carretero, J., Yanez-Sierra, J.: Sacbe: A building block approach for constructing efficient and flexible end-to-end cloud storage. Journal of Systems and Software 135, 143\u2013156 (2018)","journal-title":"Journal of Systems and Software"},{"key":"6108_CR3","doi-asserted-by":"crossref","unstructured":"Paulsson, V., Johansson, B.: \u201cCloud erp systems architectural challenges on cloud adoption in large international organizations: A sociomaterial perspective. Procedia Computer Science. vol.\u00a0219, pp.\u00a0797\u2013806, 2023. CENTERIS - International Conference on ENTERprise Information Systems \/ ProjMAN - International Conference on Project MANagement \/ HCist - International Conference on Health and Social Care Information Systems and Technologies 2022","DOI":"10.1016\/j.procs.2023.01.353"},{"key":"6108_CR4","doi-asserted-by":"publisher","first-page":"745","DOI":"10.1109\/TCE.2023.3293993","volume":"69","author":"HR Chi","year":"2023","unstructured":"Chi, H.R., Domingues, M.D.F., Zhu, H., Li, C., Kojima, K., Radwan, A.: Healthcare 5.0: In the perspective of consumer internet-of-things-based fog\/cloud computing. IEEE Transactions on Consumer Electronics 69, 745\u2013755 (2023)","journal-title":"IEEE Transactions on Consumer Electronics"},{"key":"6108_CR5","doi-asserted-by":"publisher","first-page":"1076","DOI":"10.1093\/comjnl\/bxw002","volume":"59","author":"MD Munoz-Hernandez","year":"2016","unstructured":"Munoz-Hernandez, M.D., Morales-Sandoval, M., Garcia-Hernandez, J.J.: An end-to-end security approach for digital document management. The Computer Journal 59, 1076\u20131090 (2016)","journal-title":"The Computer Journal"},{"key":"6108_CR6","first-page":"1","volume":"6","author":"A Tak","year":"2023","unstructured":"Tak, A.: The role of cloud computing in modernizing healthcare it infrastructure. Journal of Artificial Intelligence & Cloud Computing 6, 1\u20137 (2023)","journal-title":"Journal of Artificial Intelligence & Cloud Computing"},{"key":"6108_CR7","first-page":"17","volume-title":"The CIA Triad: Safeguarding Data in the Digital Realm","author":"KA Cochran","year":"2024","unstructured":"Cochran, K.A.: The CIA Triad: Safeguarding Data in the Digital Realm, pp. 17\u201332. Apress (2024)"},{"key":"6108_CR8","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2024.110360","volume":"245","author":"J Hu","year":"2024","unstructured":"Hu, J., Huang, K., Bian, G., Cui, Y.: Redact4trace: A solution for auditing the data and tracing the users in the redactable blockchain. Computer Networks 245, 110360 (2024)","journal-title":"Computer Networks"},{"issue":"8","key":"6108_CR9","doi-asserted-by":"publisher","first-page":"1591","DOI":"10.14778\/3529337.3529344","volume":"15","author":"S Burckhardt","year":"2022","unstructured":"Burckhardt, S., Chandramouli, B., Gillum, C., Justo, D., Kallas, K., McMahon, C., Meiklejohn, C.S., Zhu, X.: Netherite: Efficient execution of serverless workflows. Proceedings of the VLDB Endowment 15(8), 1591\u20131604 (2022)","journal-title":"Proceedings of the VLDB Endowment"},{"key":"6108_CR10","doi-asserted-by":"crossref","unstructured":"Davies, G.\u00a0T., Faller, I.\u00a0S., Gellert, K., Handirk, I.\u00a0T., Hesse, J., Horv\u00e1th, M., Jager, I.\u00a0T.: Security analysis of the whatsapp end-to-end encrypted backup protocol. (2023)","DOI":"10.1007\/978-3-031-38551-3_11"},{"key":"6108_CR11","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2023-0060","author":"S Scheffler","year":"2023","unstructured":"Scheffler, S., Mayer, J.: Sok: Content moderation for end-to-end encryption. Proceedings on Privacy Enhancing Technologies (2023). https:\/\/doi.org\/10.56553\/popets-2023-0060","journal-title":"Proceedings on Privacy Enhancing Technologies"},{"key":"6108_CR12","doi-asserted-by":"publisher","first-page":"70040","DOI":"10.1109\/ACCESS.2023.3292829","volume":"11","author":"ASD Alluhaidan","year":"2023","unstructured":"Alluhaidan, A.S.D., Prabu, P.: End-to-end encryption in resource-constrained iot device. IEEE Access 11, 70040\u201370051 (2023)","journal-title":"IEEE Access"},{"key":"6108_CR13","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-024-04286-w","author":"D-C Huang","year":"2024","unstructured":"Huang, D.-C., Liu, L.-C., Deng, Y.-Y., Chen, C.-L., Zeng, K.-W.: A hyperledger fabric-based emr sharing mechanisms with proxy re-encryption and ipfs. Cluster Computing (2024). https:\/\/doi.org\/10.1007\/s10586-024-04286-w","journal-title":"Cluster Computing"},{"key":"6108_CR14","doi-asserted-by":"publisher","first-page":"24","DOI":"10.9734\/ajrcos\/2023\/v15i4327","volume":"15","author":"AR Kunduru","year":"2023","unstructured":"Kunduru, A.R.: Security concerns and solutions for enterprise cloud computing applications. Asian Journal of Research in Computer Science 15, 24\u201333 (2023)","journal-title":"Asian Journal of Research in Computer Science"},{"key":"6108_CR15","first-page":"104","volume-title":"DET-ABE: A Java API for Data Confidentiality and Fine-Grained Access Control from Attribute Based Encryption","author":"M Morales-Sandoval","year":"2015","unstructured":"Morales-Sandoval, M., Diaz-Perez, A.: DET-ABE: A Java API for Data Confidentiality and Fine-Grained Access Control from Attribute Based Encryption, pp. 104\u2013119. Springer International Publishing (2015)"},{"key":"6108_CR16","doi-asserted-by":"crossref","unstructured":"Yanagawa, T., Agarwal, V., Watanabe, Y., Degenaro, L., Sailer, A.: A secure framework for continuous compliance across heterogeneous policy validation points. In 2024 IEEE 17th International Conference on Cloud Computing (CLOUD), p.\u00a0176-182, IEEE, (2024)","DOI":"10.1109\/CLOUD62652.2024.00029"},{"key":"6108_CR17","doi-asserted-by":"publisher","first-page":"2549","DOI":"10.21275\/SR24820064820","volume":"12","author":"V Kartik Sikha","year":"2023","unstructured":"Kartik Sikha, V., Siramgari, D., Somepalli, S.: Infrastructure as code: Historical insights and future directions. International Journal of Science and Research (IJSR) 12, 2549\u20132558 (2023)","journal-title":"International Journal of Science and Research (IJSR)"},{"key":"6108_CR18","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1109\/MS.2022.3192968","volume":"40","author":"D Sokolowski","year":"2023","unstructured":"Sokolowski, D., Weisenburger, P., Salvaneschi, G.: Decentralizing infrastructure as code. IEEE Software 40, 50\u201355 (2023)","journal-title":"IEEE Software"},{"key":"6108_CR19","first-page":"40","volume-title":"A Formal Treatment of End-to-End Encrypted Cloud Storage","author":"M Backendal","year":"2024","unstructured":"Backendal, M., Davis, H., G\u00fcnther, F., Haller, M., Paterson, K.G.: A Formal Treatment of End-to-End Encrypted Cloud Storage, pp. 40\u201374. Springer Nature Switzerland (2024)"},{"key":"6108_CR20","doi-asserted-by":"crossref","unstructured":"Chen, Q., Qian, J., Che, Y., Lin, Z., Wang, J., Zhou, J., Song, L., Liang, Y., Wu, J., Zheng, W., et\u00a0al.: Yuanrong: A production general-purpose serverless system for distributed applications in the cloud. In Proceedings of the ACM SIGCOMM 2024 Conference, pp.\u00a0843\u2013859, 2024","DOI":"10.1145\/3651890.3672216"},{"issue":"4","key":"6108_CR21","doi-asserted-by":"publisher","first-page":"9","DOI":"10.1109\/MS.1987.231057","volume":"4","author":"PG Bassett","year":"1987","unstructured":"Bassett, P.G.: Frame-based software engineering. IEEE Software 4(4), 9\u201316 (1987)","journal-title":"IEEE Software"},{"key":"6108_CR22","doi-asserted-by":"crossref","unstructured":"Cheong, Y.\u00a0C., Jarzabek, S.: Frame-based method for customizing generic software architectures. In Proceedings of the 1999 Symposium on Software Reusability, SSR 1999, pp.\u00a0103\u2013112, Association for Computing Machinery, Inc, 5 (1999)","DOI":"10.1145\/303008.303043"},{"key":"6108_CR23","unstructured":"Holmes, C., Evans, A.: A review of frame technology,\u201d tech. rep., University of York, Department of Computer Science, (2003)"},{"key":"6108_CR24","doi-asserted-by":"crossref","unstructured":"Prenner, N., Kl\u00fcnder, J., Schneider, K.: Defining frames to structure agile development in hybrid settings - a multi-case interview study. In ACM International Conference Proceeding Series, pp.\u00a034\u201344, Association for Computing Machinery. 5 (2022)","DOI":"10.1145\/3529320.3529324"},{"key":"6108_CR25","doi-asserted-by":"publisher","first-page":"333","DOI":"10.1016\/j.future.2024.04.053","volume":"158","author":"A Mosteiro-Sanchez","year":"2024","unstructured":"Mosteiro-Sanchez, A., Barcelo, M., Astorga, J., Urbieta, A.: End to end secure data exchange in value chains with dynamic policy updates. Futur. Gener. Comput. Syst. 158, 333\u2013345 (2024)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"6108_CR26","doi-asserted-by":"crossref","unstructured":"Pennekamp, J., Alder, F., Matzutt, R., Muhlberg, J.\u00a0T., Piessens, F., Wehrle, K.: \u201cSecure end-to-end sensing in supply chains,\u201d in 2020 IEEE Conference on Communications and Network Security (CNS), IEEE, June 2020","DOI":"10.1109\/CNS48642.2020.9162337"},{"key":"6108_CR27","doi-asserted-by":"crossref","unstructured":"Chen, S., Xie, X., Wang, X.: A novel hybrid encryption scheme using rsa-co-cp-abe for ciphertext transmission in cloud environment. In 2023 IEEE International Conference on Sensors, Electronics and Computer Engineering (ICSECE), IEEE, Aug. 2023","DOI":"10.1109\/ICSECE58870.2023.10263473"},{"key":"6108_CR28","doi-asserted-by":"publisher","first-page":"720","DOI":"10.1109\/JIOT.2022.3203182","volume":"10","author":"K-C Li","year":"2023","unstructured":"Li, K.-C., Shi, R.-H.: A flexible and efficient privacy-preserving range query scheme for blockchain-enhanced iot. IEEE Internet of Things Journal 10, 720\u2013733 (2023)","journal-title":"IEEE Internet of Things Journal"},{"key":"6108_CR29","doi-asserted-by":"publisher","first-page":"16010","DOI":"10.3390\/su152216010","volume":"15","author":"S Ghosh","year":"2023","unstructured":"Ghosh, S., Verma, S.K., Ghosh, U., Al-Numay, M.: Improved end-to-end data security approach for cloud computing. Sustainability 15, 16010 (2023)","journal-title":"Sustainability"},{"key":"6108_CR30","doi-asserted-by":"publisher","first-page":"138813","DOI":"10.1109\/ACCESS.2023.3335984","volume":"11","author":"AUR Butt","year":"2023","unstructured":"Butt, A.U.R., Mahmood, T., Saba, T., Bahaj, S.A.O., Alamri, F.S., Iqbal, M.W., Khan, A.R.: An optimized role-based access control using trust mechanism in e-health cloud environment. IEEE Access 11, 138813\u2013138826 (2023)","journal-title":"IEEE Access"},{"key":"6108_CR31","doi-asserted-by":"publisher","DOI":"10.3390\/fi17060262","volume":"17","author":"HF Atlam","year":"2025","unstructured":"Atlam, H.F., Yang, Y.: Enhancing healthcare security: A unified rbac and abac risk-aware access control approach. Future Internet 17, 262 (2025)","journal-title":"Future Internet"},{"key":"6108_CR32","unstructured":"Van\u00a0Rossum, G., Drake, F.\u00a0L.: The Python Language Reference, version 3.12 (2024)"},{"key":"6108_CR33","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-013-0057-3","author":"JA Akinyele","year":"2013","unstructured":"Akinyele, J.A., Garman, C., Miers, I., Pagano, M.W., Rushanan, M., Green, M., Rubin, A.D.: Charm: A framework for rapidly prototyping cryptosystems. Journal of Cryptographic Engineering (2013). https:\/\/doi.org\/10.1007\/s13389-013-0057-3","journal-title":"Journal of Cryptographic Engineering"},{"key":"6108_CR34","doi-asserted-by":"crossref","unstructured":"Matsakis, N.\u00a0D., Klock, F.\u00a0S.: II, \u201cThe rust language,\u201d In Proceedings of the 2014 ACM SIGAda Annual Conference on High Integrity Language Technology, HILT \u201914, pp.\u00a0103\u2013104, ACM, 2014","DOI":"10.1145\/2663171.2663188"},{"key":"6108_CR35","doi-asserted-by":"crossref","unstructured":"Baliga, A., Solanki, N., Verekar, S., Pednekar, A., Kamat, P., Chatterjee, S.: \u201cPerformance characterization of hyperledger fabric,\u201d In 2018 Crypto Valley Conference on Blockchain Technology (CVCBT), pp.\u00a065\u201374, 2018","DOI":"10.1109\/CVCBT.2018.00013"},{"key":"6108_CR36","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1108\/TQM-09-2020-0202","volume":"33","author":"G Culot","year":"2021","unstructured":"Culot, G., Nassimbeni, G., Podrecca, M., Sartor, M.: The iso\/iec 27001 information security management standard: literature review and theory-based research agenda. The TQM Journal 33, 76\u2013105 (2021)","journal-title":"The TQM Journal"},{"key":"6108_CR37","unstructured":"Albertina, B., Watson, M., Holback, C., Jarosz, R., Kirk, S., Lee, Y., Rieger-Christ, K., Lemmerman, J.: \u201cThe cancer genome atlas lung adenocarcinoma collection (tcga-luad),\u201d 2016"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06108-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-026-06108-7","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06108-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T18:07:08Z","timestamp":1784830028000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-026-06108-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":37,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2026,6]]}},"alternative-id":["6108"],"URL":"https:\/\/doi.org\/10.1007\/s10586-026-06108-7","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"13 February 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 February 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 March 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 June 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","label":"Competing interests","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","label":"Ethical approval","group":{"name":"EthicsHeading","label":"Declarations"}}],"article-number":"303"}}