Access Control in Decentralised Publish/Subscribe Systems
Access Control in Decentralised Publish/Subscribe Systems
复制标题
去中心化发布/订阅系统中的访问控制
DOI：
10.4304/jnw.2.2.57-67
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
J. Bacon
中科院分区：
文献类型：
--
作者：
Lauri I. W. Pesonen;D. Eyers;J. Bacon
发布/订阅已经成为一种有吸引力的通信范式，通过将消息发送者与接收者分离来构建互联网范围的分布式系统。大规模的发布/订阅系统可能会使用由合作但独立的组织拥有的事件传输网络的组件。随着网络参与者数量的增加，安全问题日益受到关注。到目前为止，大多数关于发布/订阅的研究都集中在有效的事件路由、事件过滤和组合事件检测上。关于保护发布/订阅系统的研究很少。本文扩展了我们之前的工作，提出并评估了一个安全的多域发布/订阅基础设施，该基础设施支持并强制对事件类型的单个属性进行细粒度访问控制。
Publish/subscribe has emerged as an attractive communication paradigm for building Internet-wide distributed systems by decoupling message senders from receivers. Large scale publish/subscribe systems are likely to employ components of the event transport network owned by cooperating, but independent organisations. As the number of participants in the network increases, security becomes an increasing concern. So far most of the research on publish/subscribe has focused on efficient event routing, event filtering, and composite event detection. Very little research has been published regarding securing publish/subscribe systems. This paper extends our previous work to present and evaluate a secure multi-domain publish/subscribe infrastructure that supports and enforces fine-grained access control over the individual attributes of event types.