Efficient and Confidentiality-Preserving Content-Based Publish/Subscribe with Prefiltering

Abstract

Content-based publish/subscribe provides a loosely-coupled and expressive form of communication for large-scale distributed systems. Confidentiality is a major challenge for publish/subscribe middleware deployed over multiple administrative domains. Encrypted matching allows confidentiality-preserving content-based filtering but has high performance overheads. It may also prevent the use of classical optimizations based on subscriptions containment. We propose a support mechanism that reduces the cost of encrypted matching, in the form of a prefiltering operator using Bloom filters and simple randomization techniques. This operator greatly reduces the amount of encrypted subscriptions that must be matched against incoming encrypted publications. It leverages subscription containment information when available, but also ensures that containment confidentiality is preserved otherwise. We propose containment obfuscation techniques and provide a rigorous security analysis of the information leaked by Bloom filters in this case. We conduct a thorough experimental evaluation of prefiltering under a large variety of workloads. Our results indicate that prefiltering is successful at reducing the space of subscriptions to be tested in all cases. We show that while there is a tradeoff between prefiltering efficiency and information leakage when using containment obfuscation, it is practically possible to obtain good prefiltering performance while securing the technique against potential leakages.

A topic‐centric access control model for the publish/subscribe paradigm

“…The pub/sub paradigm can be used to build an IoT service communication infrastructure due to its loose coupling and scalability. However, most of the research on the pub/sub paradigm has focused on routing algorithms, content filtering, and content confidentiality . To address the problems of access control in the pub/sub paradigm, some studies have proposed CapBAC mechanisms that ensure that the client subscribes and publishes messages for topics through capabilities.…”

“…However, most of the research on the pub/sub paradigm has focused on routing algorithms, content filtering, and content confidentiality. 7 To address the problems of access control in the pub/sub paradigm, some studies 2,3 have proposed CapBAC mechanisms that ensure that the client subscribes and publishes messages for topics through capabilities. CapBAC better supports user-driven needs and is suitable for distributed networks.…”

“…The ABAC and UCON models have great flexibility for functioning in the dynamic distributed environment of the IoT, but they cannot implement user‐driven access controls. (2) For the pub/sub paradigm, most of the literature focuses on routing algorithms, content filtering, etc . To accomplish access controls in the pub/sub paradigm, some studies propose a capability‐based access control mechanism for the subscription and publication of messages.…”

“…(2) For the pub/sub paradigm, most of the literature focuses on routing algorithms, content filtering, etc. 7 To accomplish access controls in the pub/sub paradigm, some studies 2,3 propose a capability-based access control mechanism for the subscription and publication of messages. Capability-based access control can better support user-driven needs and is suitable for a distributed environment, but it does not take context variables into consideration and does not support the dynamism and scalability of access permissions.…”

Confidentiality-Preserving Publish/Subscribe

“…This scenario involves periods of high throughput publications and a large number of active subscriptions depending on the stock market activity, which are well suited for optimizations based on the containment support of ASPE. However, these optimizations decrease the confidentiality of the scheme [Barazzutti et al 2015].…”