Intrusion-Tolerant and Confidentiality-Preserving Publish/Subscribe Messaging
Intrusion-Tolerant and Confidentiality-Preserving Publish/Subscribe Messaging
复制标题
DOI：
10.1109/srds51746.2020.00039
复制
发表时间：
2020-09
期刊：
影响因子：
--
通讯作者：
Sisi Duan;Chao Liu;Xin Wang;Yusen Wu;Shuai Xu;Y. Yesha;Haibin Zhang
中科院分区：
文献类型：
--
作者：
Sisi Duan;Chao Liu;Xin Wang;Yusen Wu;Shuai Xu;Y. Yesha;Haibin Zhang
我们提出了Chios，一个入侵容忍发布/订阅系统，它可以防止拜占庭故障。Chios是第一个通过细粒度访问控制和强大的发布顺序保证实现分散机密性的发布/订阅系统。这与现有的发布/订阅系统形成对比，后者的安全性和可靠性要弱得多。Chios是灵活和模块化的，由四个完全成熟的发布/订阅配置组成（每个配置都设计用于满足不同的目标）。我们已经在Amazon EC2上部署并评估了我们的系统。我们将Chios与各种发布/订阅系统进行比较。Chios和非复制、单代理的发布/订阅实现一样高效，只比Kafka和Kafka的被动复制慢一点，至少比所有使用Fabric的Hyperledger Fabric模块和发布/订阅系统快一个数量级。
We present Chios, an intrusion-tolerant publish/subscribe system which protects against Byzantine failures. Chios is the first publish/subscribe system achieving decentralized confidentiality with fine-grained access control and strong publication order guarantees. This is in contrast to existing publish/subscribe systems achieving much weaker security and reliability properties. Chios is flexible and modular, consisting of four fully-fledged publish/subscribe configurations (each designed to meet different goals). We have deployed and evaluated our system on Amazon EC2. We compare Chios with various publish/subscribe systems. Chios is as efficient as an unreplicated, single-broker publish/subscribe implementation, only marginally slower than Kafka and Kafka with passive replication, and at least an order of magnitude faster than all Hyperledger Fabric modules and publish/subscribe systems using Fabric.