Security and Privacy for Publish-Subscribe Systems

现代分布式应用程序激发了人们对“发布-订阅”技术的兴趣，在这种技术中，信息流由接收方的兴趣决定，而不是由显式寻址决定。虽然其丰富的通信模型和动态寻址显示出作为选择性信息传播平台的巨大潜力，但发布-订阅的安全方面还没有得到很好的理解。这项工作建议研究和开发一种用于发布-订阅系统的安全体系结构，特别是最小化发布-订阅基础设施必须被信任的程度。拟议的研究还将解决安全对系统可伸缩性的影响，这是发布-订阅系统的典型目标。除了安全体系结构的设计，这项研究还将包括对此类系统的安全目标的基本表征，以及由这项研究产生的安全体系结构的模拟。

Modern distributed applications have sparked a growth of interest in "publish-subscribe" technologies, where the flow of information is determined by interest on the part of the receiver rather than by explicit addressing. While its rich communication model and dynamic addressing show great potential as a platform for selective information dissemination, the security aspects of publish-subscribe are not well understood. This work proposes to research and develop a security architecture for publish-subscribe systems, particularly to minimize the degree to which the publish-subscribe infrastructure must be trusted. The proposed research will also address the impact of security on system scalability, a typical goal of pub-sub systems. In addition to the design of a security architecture, this research will include a foundational characterization of security goals for such systems and simulations of security architectures that result from this study.