Secure Event Dissemination in Publish-Subscribe Networks
Secure Event Dissemination in Publish-Subscribe Networks
复制标题
发布-订阅网络中的安全事件传播
DOI：
10.1109/icdcs.2007.136
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
Ling Liu
中科院分区：
文献类型：
--
作者：
M. Srivatsa;Ling Liu
公共网络中的安全事件传播是指将事件安全地分发给订阅这些事件的客户端，而不会将事件中的秘密属性泄露给未经授权的订阅者和公共网络中的路由节点。为事件中的秘密属性提供机密性保证的一种常见解决方案是加密，以便只有授权的订阅者才能读取它们。这里的关键挑战是构建一个安全且可扩展的基于内容的事件传播基础设施，该基础设施可以处理复杂而灵活的订阅模型，同时保持密钥管理算法的效率和可伸缩性。在本文中，我们描述了PSGuard的设计和实现，用于公共-sub网络中的安全事件传播。PSGuard利用分层密钥派生算法对可扩展密钥管理的发布-订阅匹配语义进行编码。我们的原型系统的实验评估表明，PSGuard满足安全要求，同时保持了公共-sub网络的性能和可扩展性。
Secure event dissemination in a pub-sub network refers to secure distribution of events to clients subscribing to those events without revealing the secret attributes in the event to the unauthorized subscribers and the routing nodes in a pub-sub network. A common solution to provide confidentiality guarantees for the secret attributes in an event is to encrypt so that only authorized subscribers can read them. The key challenge here is to build a secure and scalable content-based event dissemination infrastructure that can handle complex and flexible subscription models while preserving the efficiency and scalability of key management algorithms. In this paper, we describe the design and implementation of PSGuard, for secure event dissemination in pub-sub networks. PSGuard exploit hierarchical key derivation algorithms to encode publication-subscription matching semantics for scalable key management. An experimental evaluation of our prototype system shows that PSGuard meets the security requirements while maintaining the performance and scalability of a pub-sub network.