EventGuard: A system architecture for securing publish-subscribe networks

ACM Transactions on Computer Systems

Volumn 29, Issue 4, 2011, Pages

  Srivatsa, Mudhakar ^a   Liu, Ling ^b   Iyengar, Arun ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

^b Georgia Institute of Technology   (United States)

Author keywords

Access control; DoS attacks; Performance and scalability; Publish Subscribe system; Resilient overlay network

Indexed keywords

CONTENT-BASED; DENIAL OF SERVICE ATTACKS; DISTRIBUTED SYSTEMS; DOS ATTACKS; KEY COMPONENT; KEY MANAGEMENT; NETWORK DESIGN; NETWORK INFRASTRUCTURE; NODE FAILURE; PERFORMANCE METRICS; PUBLISH-SUBSCRIBE; PUBLISH-SUBSCRIBE SYSTEMS; RESILIENT OVERLAY NETWORKS; SCALABLE ROUTING; SECURITY GUARDS; SYSTEM ARCHITECTURES; VARIOUS ATTACKS; WIDE AREA;

ACCESS CONTROL; AUTHENTICATION; COMPUTER CRIME; NETWORK SECURITY; OVERLAY NETWORKS; PUBLISHING; SCALABILITY;

NETWORK ARCHITECTURE;

EID: 84863145281     PISSN: 07342071     EISSN: 15577333     Source Type: Journal    
DOI: 10.1145/2063509.2063510     Document Type: Article

References (32)

1. AGUILERA, K. AND STROM, R. 2000. Efficient atomic broadcast using deterministic merge. In Proceedings of the 19th ACM SIGACT-SIGOPS Symposium on Principles of Distributed Computing (PODC).
2. AGUILERA, M., STROM, R., STURMAN, D., ASTLEY, M., AND CHANDRA, T. 1999. Matching events in a content-based subscription system. In Proceedings of the 18th ACM SIGACT-SIGOPS Symposium on Principles of Distributed Computing (PODC).
3. ATALLAH, M., FRIKKEN, K., AND BLANTON, M. 2005. Dynamic and efficient key management for access hierarchies. In Proceedings of the ACM Conference on Computer and Communications Security (CCS).
4. ATALLAH, M. J., BLANTON, M., AND FRIKKEN, K. B. 2007a. Efficient techniques for realizing geo-spatial access control. In Proceedings of the Asia Conference on Computer and Communications Security (CCS).
5. ATALLAH, M. J., BLANTON, M., AND FRIKKEN, K. B. 2007b. Incorporating temporal capabilities in existing key management schemes. In Proceedings of the European Symposium on Research in Computer Security (ESORICS).
6. BANAVAR, G., CHANDRA, T., MUKHERJEE, B., AND NAGARAJARAO, J. 1999. An efficient multicast protocol for content-based publish subscribe systems. In Proceedings of the 19th International Conference on Distributed Computing Systems (ICDCS).
7. CARZANIGA, A., ROSENBLUM, D. S., AND WOLF, A. L. 2001. Design and evaluation of a wide-area event notification service. ACM Trans. Comput. Syst. 19, 3, 332-383. (Pubitemid 33619857)
8. DATTA, A. K., GRADINARIU, M., RAYNAL, M., AND SIMON, G. 2003. Anonymous publish/subscribe in P2P networks. In Proceedings of IEEE International Parallel and Distributed Processing Symposium (IPDPS).
9. EASTLAKE, D. AND JONES, P. 2001. US secure hash algorithm 1. http://www.ietf.org/rfc/rfc3174.txt.
10. ELGAMAL, T. 1985. A public key cryptosystem and a signature scheme based on discrete logarithm. IEEE Trans. Inform. Theor. 31, 4, 469-472.
11. FIPS. Data encryption standard (DES). http://www.itl.nist.gov/fipspubs/ fip46-2.htm.
12. KRAWCZYK, H., BELLARE, M., AND CANETTI, R. HMAC: Keyed-Hashing for message authentication. http://www.faqs.org/rfcs/rfc2104.html.
13. MALKHI, D., RODEH, O., AND REITER, M. 2001. Efficient update diffusion in byzantine environments. In Proceedings of the 20th IEEE Symposium on Reliable Distribute Systems (SRDS).
14. MATHPAGES. Generating monotone boolean functions. http://www.mathpages. com/home/kmath094.htm.
15. OPENSSL. Openssl. http://www.openssl.org/.
16. OPYRCHAL, L. AND PRAKASH, A. 2001. Secure distribution of events in content-based publish subscribe system. In Proceedings of the 10th USENIX Security Symposium.
17. PERNG, G., REITER, M. K., AND WANG, C. 2006. M2: Multicasting mixes for efficient and anonymous communication. In Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS).
18. QIN LV, S. R. AND SHENKER, S. 2002. Can heterogeneity make gnutella scalable? In Proceedings of the 1st International Workshop on Peer-to-Peer Systems.
19. RAFAELI, S. AND HUTCHISON, D. 2003. A survey of key management for secure group communication. J. ACM Comput. Surv. 35, 3.
20. RAICIU, C. AND ROSENBLUM, D. S. 2006. Enabling confidentiality in content-based publish/subscribe infrastructures. In Proceedings of IEEE SecureComm Conference.
21. RIVEST, R. 1992. The MD5 message-digest algorithm. http://www.ietf.org/ rfc/rfc1321.txt.
22. SONG, D., WAGNER, D., AND PERRIG, A. 2000. Practical techniques for searches over encrypted data. In Proceedings of the IEEE Symposium on Security and Privacy.
23. SRIVATSA, M., GEDIK, B., AND LIU, L. 2006. Scaling unstructured peer-to-peer networks with multi-tier capability aware topologies. IEEE Trans. Parall. Distrib. Syst. 17, 10.
24. SRIVATSA, M. AND LIU, L. 2004. Vulnerabilities and security issues in structured overlay networks: A quantitative analysis. In Proceedings of the Annual Computer Security Applications Conference (ACSAC).
25. SRIVATSA, M. AND LIU, L. 2005. Secure event notification architecture for publish-subscribe networks. In Proceedings of the ACM Conference on Computer and Communication Security (CCS).
26. SRIVATSA, M. AND LIU, L. 2007. Secure event dissemination in content-based publish-subscribe networks. In Proceedings of the IEEE International Conference on Distributed Computing Systems (ICDCS).
27. SRIVATSA, M., XIONG, L., AND LIU, L. 2005. Trustguard: Countering vulnerabilities in reputation management for decentralized overlay networks. In Proceedings of the World Wide Web Conference (WWW).
28. WANG, C., CARZANIGA, A., EVANS, D., AND WOLF, A. L. 2002. Security issues and requirements for internet-scale publish-subscribe systems. In Proceedings of the 35th Hawaii International Conference on System Sciences.
29. WONG, C. K., GOUDA, M. G., AND LAM, S. S. 2000. Secure group communications using key graphs. IEEE/ACM Trans. Netw. 8, 1, 16-30. (Pubitemid 30584705)
30. XIONG, L. AND LIU, L. 2004. Peertrust: Supporting reputation-based trust for peer-to-peer electronic communities. IEEE Trans. Knowl. Data Engin. 16, 7.
31. YANG, Y. R., LI, X. S., ZHANG, X. B., AND LAM, S. S. 2001. Reliable group rekeying: A performance analysis. In Proceedings of ACM SIGCOMM Conference.
32. ZEGURA, E. W., CALVERT, K., AND BHATTACHARJEE, S. 1996. How to model an internetwork. In Proceedings of the IEEE Infocom Conference.