Security Policy and Information Sharing in Distributed Event-Based Systems

Shand, Brian; Pietzuch, Peter; Papagiannis, Ioannis; Moody, Ken; Migliavacca, Matteo; Eyers, David; Bacon, Jean

doi:10.1007/978-3-642-19724-6_7

Cited by 9 publications

(3 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Studies around the confidentiality of pub/sub systems have first focused on brokers' access control. Several solutions have been proposed using Role-Based Access Control (RBAC) [6], [7], Attribute-Based Access Control (ABAC) [8], [9] and Policy-Based Access Control (PBAC) [10], [11]. In these schemes, the authentication has to be done by a trusted (or at least semi-trusted) entity (i.e.…”

Section: A Access Control Solutionsmentioning

confidence: 99%

An IoT Attribute-Based Security Framework for Topic-Based Publish/Subscribe Systems

et al. 2021

View full text Add to dashboard Cite

Publish/subscribe is a widely used paradigm in the Internet of Things (IoT). It allows a loose coupling between data producers and data consumers using a network of interconnected brokers. However, sensitive data could be exposed if a broker is compromised or if the broker itself is curious about the information that is exchanged. In this paper, we present a complete security framework for topic-based publish/subscribe systems to ensure both security and privacy at the broker level, going beyond the naive encryption of information while keeping the loose coupling between publishers and subscribers. Furthermore, the proposed solution enables user revocation at the broker level; i.e. a revoked user can no longer subscribe to published data. To achieve that, we propose a unified solution relying on attribute-based cryptography with: (1) Attribute-Based Encryption (ABE) for data encryption; (2) a new construction of Attribute-Based Keyword Search (ABKS) to allow the broker to perform an encrypted matching that enforces privacy; and (3) an Attribute-Based Signature (ABS) to enforce the data authentication.INDEX TERMS Secure publish/subscribe, attribute-based cryptography, publications/subscriptions confidentiality, user revocation.

show abstract

Section: A Access Control Solutionsmentioning

confidence: 99%

An IoT Attribute-Based Security Framework for Topic-Based Publish/Subscribe Systems

et al. 2021

View full text Add to dashboard Cite

show abstract

“…Several approaches have targeted the security in EBSs [15,17,20,22,25]. Simeon et al [25] examined the security vulnerabilities of event-driven systems and defined the conditions that produce them.…”

Section: Related Workmentioning

confidence: 99%

Detecting Inter-Component Vulnerabilities in Event-based Systems

Lee¹

2019

IJACSA

View full text Add to dashboard Cite

Event-based system (EBS) has become popular because of its high flexibility, scalability, and adaptability. These advantages are enabled by its communication mechanismimplicit invocation and implicit concurrency between components. The communication mechanism is based on nondeterminism in event processing, which can introduce inherent security vulnerabilities into a system referred to as event attacks. Event attack is a particular type of attack that can abuse, incapacitate, and damage a target system by exploiting the system's event-based communication model. It is hard to prevent event attacks because they are administered in a way that does not differ from ordinary event-based communication in general. While a number of techniques have focused on security threats in EBS, they do not appropriately resolve the event attack issues or suffer from inaccuracy in detecting and preventing event attacks. To address the risk of event attacks, I present a novel vulnerability detection technique for EBSs that are implemented by using message-oriented middleware platform. My technique has been evaluated on 25 open-source benchmark apps and eight real-world EBSs. The evaluation exhibited my technique's higher accuracy in detecting vulnerabilities on event attacks than existing techniques as well as its applicability to real-world EBSs.

show abstract

“…To protect sensitive information from untrusted brokers, several works propose to encrypt the publications and subscriptions in such a way that the brokers can still match the subscriptions against the publications' tags without learning their content [8]- [12]. As a result, subscriptions and publications are protected from brokers.…”

Section: Introductionmentioning

confidence: 99%

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Cui

Belguith

Alwis

et al. 2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

The Publish and Subscribe (pub/sub) system is an established paradigm to disseminate the data from publishers to subscribers in a loosely coupled manner using a network of dedicated brokers. However, sensitive data could be exposed to malicious entities if brokers get compromised or hacked; or even worse, if brokers themselves are curious to learn about the data. A viable mechanism to protect sensitive publications and subscriptions is to encrypt the data before it is disseminated through the brokers. State-of-the-art approaches allow brokers to perform encrypted matching without revealing publications and subscriptions. However, if malicious brokers collude with malicious subscribers or publishers, they can learn the interests of innocent subscribers, even when the interests are encrypted. In this article, we present a pub/sub system that ensures confidentiality of publications and subscriptions in the presence of untrusted brokers. Furthermore, our solution resists collusion attacks between untrusted brokers and malicious subscribers (or publishers). Finally, we have implemented a prototype of our solution to show its feasibility and efficiency.

show abstract

Security Policy and Information Sharing in Distributed Event-Based Systems

Cited by 9 publications

References 17 publications

An IoT Attribute-Based Security Framework for Topic-Based Publish/Subscribe Systems

An IoT Attribute-Based Security Framework for Topic-Based Publish/Subscribe Systems

Detecting Inter-Component Vulnerabilities in Event-based Systems

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Contact Info

Product

Resources

About