Access control in decentralised publish/subscribe systems

Journal of Networks

Volumn 2, Issue 2, 2007, Pages 57-67

  Pesonen, Lauri I W ^a   Eyers, David M ^a   Bacon, Jean ^a  

^a UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

MESSAGE PASSING; NETWORK SECURITY; PUBLISHING;

COMMUNICATION PARADIGM; COMPOSITE EVENT DETECTION; DECENTRALISED; DISTRIBUTED SYSTEMS; EVENT FILTERING; PUBLISH/SUBSCRIBE; PUBLISH/SUBSCRIBE SYSTEM; TRANSPORT NETWORKS;

ACCESS CONTROL;

EID: 36549013845     PISSN: 17962056     EISSN: None     Source Type: Journal    
DOI: 10.4304/jnw.2.2.57-67     Document Type: Article

References (22)

1. P. T. Eugster, P. A. Felber, R. Guerraoui, and A.-M. Kermarrec, "The many faces of publish/subscribe," ACM Computing Surveys (CSUR), vol. 35, no. 2, pp. 114-131, 2003.
2. A. Carzaniga, D. S. Rosenblum, and A. L. Wolf, "Design and evaluation of a wide-area event notification service," ACM Transactions on Computer Systems, vol. 19, no. 3, pp. 332-383, Aug. 2001.
3. th Int. Conf. on Middleware (Middleware '03), M. Endler and D. Schmidt, Eds. Rio de Janeiro, Brazil: Springer, June 2003, pp. 202-221.
4. M. Castro, P. Druschel, A. Kermarrec, and A. Rowstron, "SCRIBE: A large-scale and decentralized application-level multicast infrastructure," IEEE Journal on Selected Areas in communications (JSAC), vol. 20, no. 8, pp. 1489-1499, Oct. 2002.
5. st International Workshop on Distributed Event-Based Systems (DEBS'02). Vienna, Austria: IEEE, July 2002, pp. 611-618.
6. L. I. W. Pesonen and J. Bacon, "Secure event types in contentbased, multi-domain publish/subscribe systems," in SEM '05: Proceedings of the 5th international workshop on Software engineering and middleware. New York, NY, USA: ACM Press, Sept. 2005, pp. 98-105.
7. M. Blaze, J. Feigenbaum, and J. Lacy, "Decentralized trust management," in Proc. of the IEEE Conference on Security and Privacy. Oakland, CA, USA: IEEE, May 1996.
8. M. Blaze, J. Feigenbaum, and A. D. Keromytis, "Key Note: Trust management for public-key infrastructures (position paper)," in Proc. of the Cambridge 1998 Security Protocols International Workshop, vol. 1550, 1998, pp. 59-63.
9. R. L. Rivest and B. Lampson, "SDSI - A simple distributed security infrastructure," Presented at CRYPTO'96 Rumpsession, Oct. 1996.
10. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylönen, "SPKI certificate theory," Internet Engineering Task Force, RFC 2693, Sept. 1999.
11. CIS, "SDSI (a simple distributed security infrastructure)," Sept. 2001. [Online]. Available: http://theory.lcs.mit.edu/~cis/sdsi.html
12. J. Bacon, D. M. Eyers, K. Moody, and L. I. W. Pesonen, "Securing publish/subscribe for multi-domain systems," in Middleware, ser. Lecture Notes in Computer Science, G. Alonso, Ed., vol. 3790. Springer, 2005, pp. 1-20.
13. S. Rafaeli and D. Hutchison, "A survey of key management for secure group communication," ACM Computing Surveys, vol. 35, no. 3, pp. 309-329, 2003.
14. D. A. McGrew and A. T. Sherman, "Key establishment in large dynamic groups using one-way function trees," TIS Labs at Network Associates, Inc., Glenwood, MD, Tech. Rep. 0755, May 1998.
15. J. Bacon, K. Moody, and W. Yao, "Access control and trust in the use of widely distributed services," in Middleware 2001, vol. LNCS 2218. Springer-Verlag, Nov. 2001, pp. 300-315.
16. J. Bacon, K. Moody, and W. Yao, "A Model of OASIS Role-Based Access Control and its Support for Active Security," ACM Transactions on Information and System Security (TISSEC), vol. 5, no. 4, pp. 492-540, Nov. 2002.
17. C. Wang, A. Carzaniga, D. Evans, and A. L. Wolf, "Security issues and requirements in internet-scale publish-subscribe systems," in Proc. of the 35th Annual Hawaii International Conference on System Sciences (HICSS'02). Big Island, HI, USA: IEEE, 2002.
18. th USENIX Security Symposium. USENIX, Aug. 2001.
19. T. Dierks and C. Allen, "The TLS protocol, version 1.0," Internet Engineering Task Force, RFC 2246, Jan. 1999.
20. th ACM conference on Computer and communications security. New York, NY, USA: ACM Press, 2005, pp. 289-298.
21. Y. Zhao and D. C. Sturman, "Dynamic access control in a content-based publish/subscribe system with delivery guarantees," in Proc. of the 26th IEEE International Conference on Distributed Computing Systems (ICDCS'06). Los Alamitos, CA, USA: IEEE Computer Society, 2006, p. 60.
22. L. I. W. Pesonen, D. M. Eyers, and J. Bacon, "A capabilitiesbased access control architecture for multi-domain publish/subscribe systems," in Proceedings of the Symposium on Applications and the Internet (SAINT 2006). Phoenix, AZ: IEEE, Jan. 2006, pp. 222-228.