A survey of security solutions for distributed publish/subscribe systems

Computers and Security

Volumn 61, Issue , 2016, Pages 94-129

  Uzunov, Anton V ^a  

^a DEFENCE SCIENCE AND TECHNOLOGY ORGANISATION   (Australia)

Author keywords

Distributed event based systems; Publish subscribe; Security architecture; Software architecture; Software security; Survey

Indexed keywords

PUBLISHING; SOFTWARE ARCHITECTURE; SURVEYING; SURVEYS;

ARCHITECTURAL VIEWPOINTS; ASYNCHRONOUS COMMUNICATION; DISTRIBUTED COMPONENTS; DISTRIBUTED EVENT-BASED SYSTEMS; PUBLISH/SUBSCRIBE; PUBLISH/SUBSCRIBE SYSTEM; SECURITY ARCHITECTURE; SOFTWARE SECURITY;

MESSAGE PASSING;

EID: 84974849300     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2016.04.008     Document Type: Review

References (196)

1. E. AbdAllah, H.S. Hassanein, and M. Zulkernine A survey of security attacks in Information-Centric Networking IEEE Communications Surveys & Tutorials 17 3 2015 1441 1454
2. H. Abie Adaptive security and trust management for autonomic message-oriented middleware in: Procs. 6th international conference on mobile adhoc and sensor systems (MASS). IEEE, Macau, pp. 810-817 2009
3. H. Abie, I. Dattani, M. Novkovic, J. Bigham, S. Topham, and R. Savola GEMOM - significant and measurable progress beyond the state of the art in: Procs. 3rd international conference on systems and networks communications (ICSNC). IEEE, Sliema, pp. 191-196 2008 10.1109/ICSNC.2008.33
4. H. Abie, R.M. Savola, and I. Dattani Robust, secure, self-adaptive and resilient messaging middleware for business critical systems in: Procs. ComputationWorld 2009. IEEE, Athens, pp. 153-160 2009 10.1109/ComputationWorld.2009.26
5. H. Abie, R.M. Savola, J. Bigham, I. Dattani, D. Rotondi, and G. Da Bormida Self-healing and secure adaptive messaging middleware for business-critical systems Int J Adv Secur 3 1 & 2 2010 34 51
6. B. Ahlgren, C. Dannewitz, C. Imbrenda, D. Kutscher, and B. Ohlman A survey of information-centric networking IEEE Commun Magazine 50 7 2012 26 36
7. A. Altaweel Providing basic security mechanisms in a publish/subscribe system Masters thesis; University of Stuttgart 2009
8. L. Aniello, R. Baldoni, C. Ciccotelli, G.A. Di Luna, F. Frontali, and L. Querzoni The overlay scan attack: inferring topologies of distributed pub/sub systems through broker saturation 2014 ACM Press 107 117
9. D. Arnold, and I. Lister Elvin federation protocol 1.0 Internet-Draft http://www.elvin.org/specs/draft-elvin-federation-10-00.txt 2007 [accessed 05.16]
10. R. Arkins Persistent Elvin For Mobile Devices, [BInfTech Honours thesis] 2000 The University of Queensland Australia
11. P. Avgeriou, and U. Zdun Architectural patterns revisited - a pattern language in: Procs. 10th European conference on pattern languages of programming (EuroPLoP 2005). Kloster Isree, Germany 2005 1 39
12. J. Bacon, D. Eyers, K. Moody, and L. Pesonen Securing publish/subscribe for multi-domain systems G. Alonso, Middleware 2005, lecture notes in computer science 2005 Springer Berlin Heidelberg 1 20
13. J. Bacon, D.M. Eyers, J. Singh, and P.R. Pietzuch Access control in publish/subscribe systems in: Proceedings of the second international conference on distributed event-based systems. ACM, pp. 23-34 2008
14. J. Bacon, D. Eyers, J. Singh, B. Shand, M. Migliavacca, and P. Pietzuch Security in multi-domain event-based systems Inf Technol (it - Methoden und innovative Anwendungen der Informatik und Informationstechnik) 51 5 2009 277 284 10.1524/itit.2009.0552
15. D.E. Bakken, A. Bose, C.H. Hauser, D.E. Whitehead, and G.C. Zweigle Smart generation and transmission with coherent, real-time data P IEEE 99 2011 928 951 10.1109/JPROC.2011.2116110
16. R. Baldoni, R. Beraldi, S. Tucci Piergiovanni, and A. Virgillito On the modelling of publish/subscribe communication systems Concurr Comput Pract Exper 17 12 2005 1471 1495 10.1002/cpe.879
17. R. Baldoni, L. Querzoni, S. Tarkoma, and A. Virgillito Distributed event routing in publish/subscribe systems B. Garbinato, H. Miranda, L. Rodrigues, Middleware for network eccentric and mobile applications 2009 Springer Berlin Heidelberg 219 244
18. G. Banavar, M. Kaplan, K. Shaw, R.E. Strom, D.C. Sturman, and Tao W. Information flow based event distribution middleware in: Procs. 19th IEEE international conference on distributed computing systems workshops on electronic commerce and web-based applications/middleware, pp. 114-121 1999 10.1109/ECMDD.1999.776424
19. R. Barazzutti, P. Felber, H. Mercier, E. Onica, and E. Rivière Thrifty privacy: efficient support for privacy-preserving publish/subscribe in: Procs. 6th int. conf. on distributed event-based systems (DEBS). ACM, pp. 225-236 2012
20. S. Behnel, L. Fiege, and G. Muhl On quality-of-service and publish-subscribe in: Procs. 26th IEEE international conference on distributed computing systems workshops (ICDCS Workshops 2006). IEEE, pp. 20-20 2006
21. P. Bellavista, A. Corradi, and A. Reale Quality of service in wide scale publish/subscribe systems IEEE Communications Surveys & Tutorials 16 3 2014 1591 1616 10.1109/SURV.2014.031914.00192
22. A. Belokosztolszki, D.M. Eyers, P.R. Pietzuch, J. Bacon, and K. Moody Role-based access control for publish/subscribe middleware architectures Procs. 2nd International Workshop on Distributed Event-Based Systems (DEBS) 2003 ACM 1 8
23. S. Bernard, M.G. Potop-Butucaru, and S. Tixeuil A framework for secure and private P2P publish/subscribe Stabilization, safety, and security of distributed systems 2010 Springer 531 545
24. R. Blanco, and P. Alencar Event models in distributed event based systems A.M. Hinze, A. Buchmann, Principles and applications of distributed event-based systems 2010 IGI Global 19 42
25. R. Blanco, Wang J., and P. Alencar A metamodel for distributed event based systems in: Procs. 2nd international conference on distributed event-based systems (DEBS). ACM, pp. 221-232 2008
26. R.M. Blanco Process models for distributed event-based systems Ph.D. thesis; University of Waterloo 2010
27. R. Bruni, A. Corradini, F. Gadducci, A.L. Lafuente, and A. Vandin A conceptual framework for adaptation J. de Lara, A. Zisman, Fundamental approaches to software engineering (procs. fase 2012), lecture notes in computer science 7212 2012 Berlin Heidelberg Springer 240 254
28. Bu T., S. Norden, and T. Woo A survivable DoS-resistant overlay network Comput Networks 50 9 2006 1281 1301
29. M. Bunke, R. Koschke, and K. Sohr Organizing security patterns related to security and pattern recognition requirements Int J Adv Secur 5 1 & 2 2012 46 67
30. L. Burdusel Cryptographic protocol for secure dissemination of notification messages in: Procs. 2011 IEEE international conference on intelligent computer communication and processing (ICCP). IEEE, pp. 399-405 2011
31. F. Buschmann, K. Henney, and D.C. Schmidt Pattern-oriented software architecture 1st ed A pattern language for distributed computing vol. 4 2007 Wiley
32. H.S. Carvalho, A.L. Murphy, W.B. Heinzelman, and C.J.N. Coelho Jr Network-based distributed systems middleware in: Middleware Workshops. pp. 13-20 2004
33. M. Castro, P. Druschel, A.-M. Kermarrec, and A.I.T. Rowstron Scribe: a large-scale and decentralized application-level multicast infrastructure IEEE J Select Areas Commun 20 8 2002 1489 1499
34. A. Chaabane, and M. Jmaiel A secure content-based publish/subscribe middleware IEEE, pp. 619-622 2009
35. A. Chakrabarti Grid computing security 2007 ed 2007 Springer Berlin
36. R. Chakravarthy, C. Hauser, and D.E. Bakken Long-lived authentication protocols for process control systems Int J Critical Infras Protect 3 3-4 2010 174 181 10.1016/j.ijcip.2010.10.001
37. P.C. Chapin, C. Skalka, and Wang X.S. Authorization in trust management: features and foundations ACM Comput Surv 40 3 2008 9:1 48 10.1145/1380584.1380587
38. S. Choi, G. Ghinita, and E. Bertino A privacy-enhancing content-based publish/subscribe system using scalar product preserving transformations Database and expert systems applications 2010 Springer 368 384
39. A. Corsaro, L. Querzoni, S. Scipioni, S.T. Piergiovanni, and A. Virgillito Quality of service in publish/subscribe middleware Global Data Management 19, 20 2006
40. V. Cristea, F. Pop, C. Dobre, and A. Costan Distributed architectures for event-based systems S. Helmer, A. Poulovassilis, F. Xhafa, Reasoning in event-based distributed systems, studies in computational intelligence 2011 Springer Berlin Heidelberg 11 45
41. G. Crescenzo, B. Coan, J. Schultz, S. Tsang, and R.N. Wright Privacy-preserving publish/subscribe: efficient protocols in a distributed model J. Garcia-Alfaro, Data Privacy Management and Autonomous Spontaneous Security, Springer LNCS 8247 2014 Springer-Verlag 114 133
42. J. Daubert, M. Fischer, T. Grube, S. Schiffner, P. Kikiras, and M. Mühlhäuser AnonPubSub: Anonymous publish-subscribe overlays Computer Communications 76 2016 42 53
43. J. Daubert, M. Fischer, S. Schiffner, and M. Mühlhäuser Distributed and anonymous publish-subscribe J. Lopez, Huang X. R. Sandhu, Network and System Security. Springer LNCS 7873 2013 Springer Berlin-Heidelberg 685 691
44. A. Dikanski, R. Steinegger, and S. Abeck Identification and implementation of authentication and authorization patterns in the Spring security framework in: Procs. 6th international conference on emerging security information, systems and technologies (SECURWARE). IARIA, Rome, Italy, pp. 14-20 2012
45. G. Dini, and A. Lo Duca On securing publish-subscribe systems with security groups in: IEEE symposium on computers and communications (ISCC 2009). IEEE, pp. 532-537 2009
46. I. Dionysiou Dynamic and composable trust for indirect interactions Ph.D. thesis; Washington State University 2006
47. I. Dionysiou, D. Frincke, D. Bakken, and C. Hauser An approach to trust management: challenges for critical infrastructures J. Lopez, B.M. Hämmerli, Critical information infrastructures security (Procs. CRITIS 2007), LNCS 5141 2008 Springer Berlin Heidelberg 173 184
48. M. Docking, A.V. Uzunov, C. Fiddyment, R. Brain, S. Hewett, and L. Blucher UNISON: towards a middleware architecture for autonomous cyber defence in: Procs. 24th Australasian software engineering conference (ASWEC), IEEE computer society, Adelaide, Australia, pp. 203-212 2015
49. P. Dube, N. Halim, K. Karenos, M. Kim, Liu Z., S. Parthasarathy, and et al. Harmony: holistic messaging middleware for event-driven systems IBM Syst J 47 2 2008 281 287
50. M. Endler, G. Baptista, L.D. Silva, R. Vasconcelos, M. Malcher, V. Pantoja, and et al. ContextNet: context reasoning and sharing middleware for large-scale pervasive collaboration and social networking in: Procs. 12th international middleware conference workshop on posters and demos track (PDT), ACM, Lisbon, Portugal, pp. 2:1-2:2 2011
51. C. Esposito, and M. Ciampi On security in publish/subscribe services: a survey IEEE Commun Surv Tutor 17 2 2015 966 997 10.1109/COMST.2014.2364616
52. C. Esposito, D. Cotroneo, and S. Russo On reliability in publish/subscribe services Comput Networks 57 5 2013 1318 1343 10.1016/j.comnet.2012.10.023
53. P. Eugster Type-based publish/subscribe: concepts and experiences ACM Trans Prog Lang Syst 29 1 2007 10.1145/1180475.1180481 6:1-50
54. P.T. Eugster, P.A. Felber, R. Guerraoui, and A.-M. Kermarrec The many faces of publish/subscribe ACM Comput Surveys (CSUR) 35 2 2003 114 131
55. D.M. Eyers, L. Vargas, J. Singh, K. Moody, and J. Bacon Relational database support for event-based middleware functionality in: Procs. 4th int. conference on distributed event-based systems (DEBS). ACM, pp. 160-171 2010
56. E.B. Fernandez Security patterns in practice: designing secure architectures using software patterns 1st ed 2013 Wiley
57. E.B. Fernandez, and A.V. Uzunov Secure middleware patterns Xiang Y. J. Lopez, C.-C.J. Kuo, Zhou W. Cyberspace safety and security, lecture notes in computer science 7672 2012 Berlin Heidelberg Springer 470 482
58. E.B. Fernandez, R. Monge, and K. Hashizume Building a security reference architecture for cloud systems Requir Eng 21 2 2016 225 249 10.1007/s00766-014-0218-7
59. E. Fidler PADRES: a distributed content-based publish/subscribe system Ph.D. thesis; University of Toronto 2006
60. L. Fiege, A. Zeidler, A. Buchmann, R. Kilian-Kehr, and G. Mühl Security aspects in publish/subscribe systems in: Procs. 3rd international workshop on distributed event-based systems (DEBS). IET, Edinburgh, UK, pp. 44-49 2004
61. T. Fischer Quality-of-Service-Aware Configuration of Distributed Publish-Subscribe Systems, [PhD Thesis] 2014 Friedrich-Alexander Universität Erlangen-Nürnberg Germany
62. N. Fotiou, G.F. Marias, and G.C. Polyzos Towards a secure rendezvous network for future publish/subscribe architectures Future internet-FIS 2010 2010 Springer 49 56 LNCS 6369
63. N. Fotiou, G.F. Marias, and G.C. Polyzos Fighting spam in publish/subscribe networks using information ranking in: Procs. 6th EURO-NF conference on next generation internet (NGI). IEEE, pp. 1-6 2010
64. J. García, M.A. Jaeger, G. Mühl, and J. Borrell Decoupling components of an attack prevention system using publish/subscribe Intelligence in communication systems 2005 Springer 87 97
65. H. Gjermundrød, H. Gjermundrod, D.E. Bakken, C.H. Hauser, and A. Bose GridStat: a flexible qos-managed data dissemination framework for the power grid IEEE Trans Power Delivery 24 1 2009 136 143
66. J.F. Gonçalves, F.J. da Silva e Silva, R.O. Vasconcelos, G.L.B. Baptista, and M. Endler A security infrastructure for massive mobile data distribution Procs. 11th ACM international symposium on mobility management and wireless access (MobiWac), ACM Press, pp. 41-50 2013 10.1145/2508222.2508237
67. M. Hafiz A pattern language for developing privacy enhancing technologies Softw Pract Exp 43 7 2013 769 787
68. M. Hafiz, P. Adamczyk, and R. Johnson Growing a pattern language (for security) In: Procs. 18th conference on pattern languages of programs (PLoP) 2011
69. S.T. Halkidis, N. Tsantalis, A. Chatzigeorgiou, and G. Stephanides Architectural risk analysis of software systems based on security patterns IEEE Trans Depend Secure Comput 5 3 2008 129 142
70. S. Hall, and W. McQuay Fundamental features of a unified trust model for distributed systems in: Procs. 2011 IEEE national aerospace and electronics conference (NAECON). IEEE, Dayton, OH, pp. 139-145 2011
71. C.H. Hauser, D.E. Bakken, I. Dionysiou, K.H. Gjermundrod, V. Irava, J. Helkey, and et al. Security, trust, and QoS in next-generation control and communication for large power systems Int J Critical Infras 4 1 2008 3 16
72. P. Hein, D. Biswas, L.A. Martucci, and M. Muhlhauser Conflict detection and lifecycle management for access control in publish/subscribe systems in: Procs. 13th international symposium on high-assurance systems engineering (HASE). IEEE, pp. 104-111 2011
73. T. Heyman, R. Scandariato, C. Huygens, and W. Joosen Using security patterns to combine security metrics in: Procs. 3rd international conference on availability, reliability and security (ARES). IEEE, Barcelona, Spain, pp. 1156-1163 2008
74. Huang Y., and H. Garcia-Molina Publish/subscribe in a mobile environment Wireless Netw 10 6 2004 643 652
75. W. Hummer, C. Inzinger, P. Leitner, B. Satzger, and S. Dustdar Deriving a unified fault taxonomy for event-based systems in: Proceedings of the 6th ACM international conference on distributed event-based systems (DEBS). ACM, pp. 167-78 2012
76. IBM The Gryphon project http://www.research.ibm.com/distributedmessaging/gryphon.html 2014 accessed 2016
77. M. Ion, G. Russello, and B. Crispo Design and implementation of a confidentiality and access control solution for publish/subscribe systems Computer Networks 56 2012 2014 2037
78. H.-A. Jacobsen, A.K.Y. Cheung, Li G., B. Maniymaran, V. Muthusamy, and R.S. Kazemzadeh The PADRES publish/subscribe system 2010
79. M.A. Jaeger Self-Managing Publish/Subscribe Systems, [PhD Thesis] 2007 TU Berlin Germany
80. M.A. Jaeger, H. Parzyjegla, G. Mühl, and K. Herrmann Self-organizing broker topologies for publish/subscribe systems in: Proceedings of the 2007 ACM symposium on applied computing (SAC). ACM, pp. 543-550 2007
81. P. Judge, and M. Ammar Security issues and solutions in multicast content distribution: A survey IEEE Netw 17 2003 30 36
82. T. Kanstrén, and R. Savola Definition of core requirements and a reference architecture for a dependable, secure and adaptive distributed monitoring framework in: Procs. 3rd international conference on dependability (DEPEND). IEEE, Venice, pp. 154-163 2010 10.1109/DEPEND.2010.31
83. T. Kanstrén, R. Savola, S. Haddad, and A. Hecker An adaptive and dependable distributed monitoring framework Int J Adv Secur 4 1 & 2 2011 80 94
84. K. Karenos, M. Kim, Lei H., Yang H., and Ye F. Providing quality of service in wide-area publish/subscribe systems: poster in: Procs. 10th ACM/IFIP/USENIX int. conference on middleware. Springer-Verlag New York, p. 31 2009
85. H. Khurana, and R.K. Koleva Scalable security and accounting services for content-based publish/subscribe Systems Int J E-Business Res 2 3 2006 1 16 10.4018/jebr.2006070101
86. D. Lagutin, K. Visala, A. Zahemszky, T. Burbridge, and G.F. Marias Roles and security in a publish/subscribe network architecture in: Computers and Communications (ISCC), 2010 IEEE Symposium on. IEEE, pp. 68-74 2010
87. A.J. Lee, M. Winslett, and K.J. Perano TrustBuilder2: a reconfigurable framework for trust negotiation E. Ferrari, Li N. E. Bertino, Y. Karabulut, Trust management III, IFIP advances in information and communication technology 300 2009 Springer Berlin Heidelberg 176 195
88. Li G., V. Muthusamy, and H.-A. Jacobsen A distributed service-oriented architecture for business process execution ACM Trans Web 4 1 2010 10.1145/1658373.1658375 2:1-33
89. Liu Y., and B. Plale Survey of publish subscribe event systems Computer Science Dept, Indian University 16 2003
90. Lu X., Yang T., Liao Z., Li X., Wang Y., Liu W., and et al. A Novel QoS-Enable Real-Time Publish-Subscribe Service IEEE, pp. 19-26 2008 10.1109/ISPA.2008.61
91. S.P. Mahambre, M. Kumar, and U. Bellur A taxonomy of QoS-aware, adaptive event-dissemination middleware IEEE Internet Comput 11 4 2007 35 44
92. A.K. Maji, and S. Bagchi v-CAPS: a confidentiality and anonymity preserving routing protocol for content-based publish-subscribe networks Security and privacy in communication networks 2012 Springer 281 302
93. M.A. Marsh, and F.B. Schneider CODEX: a robust and secure secret distribution system IEEE Trans Depend Secure Comput 1 1 2004 34 47 10.1109/TDSC.2004.3
94. J. Martins, and S. Duarte Routing algorithms for content-based publish/subscribe systems IEEE Commun Surv Tutor 12 1 2010 39 58 10.1109/SURV.2010.020110.00065
95. T.R. Mayer, L. Brunie, D. Coquil, and H. Kosch On reliability in publish/subscribe systems: a survey Int J Parall Emerg Distrib Syst 27 5 2012 369 386 10.1080/17445760.2012.697162
96. R. Meier Event-based middleware for collaborative ad hoc applications Ph.D. thesis; Department of Computer Science, Trinity College 2003
97. R. Meier, and V. Cahill Taxonomy of distributed event-based programming systems Comput J 48 5 2005 602 626 10.1093/comjnl/bxh120
98. M. Migliavacca, I. Papagiannis, D.M. Eyers, B. Shand, J. Bacon, and P. Pietzuch DEFCON: high-performance event processing with information security Procs. 2010 USENIX Annual Technical Conference 2010 USENIX Association
99. M. Migliavacca, I. Papagiannis, D.M. Eyers, B. Shand, J. Bacon, and P. Pietzuch Distributed middleware enforcement of event flow security policy Proceedings of the 11th ACM/IFIP/USENIX International Conference on Middleware. Springer LNCS 6452 2010 Springer-Verlag 334 354
100. K. Minami, A.J. Lee, M. Winslett, and N. Borisov Secure aggregation in a publish-subscribe system in: Proceedings of the 7th ACM workshop on privacy in the electronic society. ACM, pp. 95-104 2008
101. K. Minami, N. Borisov, and C.A. Gunter Safety in discretionary access control for logic-based publish-subscribe systems in: Procs. 14th ACM symposium on access control models and technologies. ACM, pp. 3-12 2009
102. C. Möckel, and A. Abdallah Threat modeling approaches and tools for securing architectural designs of an e-banking application in: Procs. 6th international conference on information assurance and security (IAS). Presented at the 2010 sixth international conference on information assurance and security (IAS), pp. 149-154 2010
103. G. Mühl, L. Fiege, and P. Pietzuch Distributed event-based systems 1st ed 2006 Springer Berlin
104. S. Myagmar, A. Lee, and W. Yurcik Threat modeling as a basis for security requirements Presented at the Procs. 2005 ACM workshop on storage security and survivability (StorageSS), ACM Press, pp. 94-102 2005
105. M. Nabeel, S. Appel, E. Bertino, and A. Buchmann Privacy preserving context aware publish subscribe systems in: Procs. 7th international conference (NSS). Springer, Madrid, Spain, pp. 465-478 2013
106. M. Nabeel Privacy Preserving Access Control on Third-Party Data Management Systems, [PhD Thesis and CERIAS Tech Report 2012-12] 2012 Purdue University USA
107. T.-D. Nguyen, and E.-N. Huh An efficient key management for secure multicast in sensor-cloud IEEE, pp. 3-9 2011
108. OASIS Web services notification (WSN) https://www.oasis-open.org/committees/wsn/ 2006 accessed 12.15
109. OMG DDS security specification http://www.omg.org/spec/DDS-SECURITY/ 2014 accessed 07.15
110. OMG Data distribution service (DDS) http://www.omg.org/spec/DDS/ 2014 accessed 07.15
111. OMG The real-time publish-subscribe wire protocol http://www.omg.org/spec/DDSI-RTPS/ 2014 accessed 07.15
112. L. Opyrchal, and A. Prakash Secure Distribution of Events in Content-Based Publish Subscribe Systems Procs. 10th USENIX Security Symposium 2001 281 296 Washington DC, USA
113. L. Opyrchal, and A. Prakash Publish subscribe middleware V. Prabhu, S. Kumara, M. Kamath, Scalable enterprise systems: an introduction to recent advances, integrated series in information systems 2003 Springer US 249 285
114. L. Opyrchal, A. Prakash, and A. Agrawal Supporting privacy policies in a publish-subscribe substrate for pervasive environments J Netw 2 1 2007 17 26
115. F. Paganelli, G. Vannuccini, D. Parlanti, D. Giuli, and P. Cianchi GEMOM middleware self-healing and fault-tolerance: a highway tolling case study in: Procs. 6th international conference on systems and networks communications (ICSNC). pp. 136-142 2011
116. P. Pal, G. Lauer, J. Khoury, N. Hoff, and J. Loyall P3S: a privacy preserving publish-subscribe middleware Middleware 2012 2012 Springer 476 495
117. S. Pallickara, and G. Fox NaradaBrokering: a distributed middleware framework and architecture for enabling durable peer- to-peer grids M. Endler, D. Schmidt, Middleware 2003, lecture notes in computer science 2003 Springer Berlin Heidelberg 41 61
118. S. Pallickara, M. Pierce, G. Fox, Yan Y., and Huang Y. A security framework for distributed brokering systems Community Grids Laboratory Technical Report 2005
119. S. Pallickara, M. Pierce, H. Gadgil, G. Fox, Yan Y., and Huang Y. A framework for secure end-to-end delivery of messages in publish/subscribe systems in: Proceedings of the 7th IEEE/ACM international conference on grid computing. IEEE Computer Society, pp. 215-222 2006
120. S. Pallickara, J. Ekanayake, and G. Fox A scalable approach for the secure and authorized tracking of the availability of entities in distributed systems in: Procs. 2007 IEEE international parallel and distributed processing symposium (IPDPS). IEEE, pp. 1-10 2007
121. S. Pallickara, G. Fox, and H. Gadgil On the secure creation, organisation and discovery of topics in distributed publish/subscribe systems Int J High Perform Comput Netw 5 3 2008 156 167
122. H. Parzyjegla Engineering publish/subscribe systems and event-driven applications Ph.D. thesis; University of Rostock 2014
123. H. Parzyjegla, M.A. Jaeger, G. Muhl, and T. Weis Model-driven development and adaptation of autonomous control applications Distributed Systems Online, IEEE 9, 2-2 2008
124. H. Parzyjegla, D. Graff, A. Schröter, J. Richling, and G. Mühl Design and implementation of the Rebeca publish/subscribe middleware From active data management to event-based systems and more 2010 Springer 124 140
125. A. Paschke, P. Vincent, A. Alves, and C. Moxey Tutorial on advanced design patterns in event processing in: Proceedings of the 6th ACM international conference on distributed event-based systems. ACM, pp. 324-334 2012
126. L.I. Pesonen A capability-based access control architecture for multi-domain publish/subscribe systems University of Cambridge, Computer Laboratory, Technical Report 2008
127. L.I. Pesonen, and J. Bacon Secure event types in content-based, multi-domain publish/subscribe systems in: Proceedings of the 5th international workshop on software engineering and middleware. ACM, pp. 98-105 2005
128. L.I. Pesonen, D.M. Eyers, and J. Bacon A capability-based access control architecture for multi-domain publish/subscribe systems in: Applications and the Internet, 2006. SAINT 2006. International Symposium on. IEEE, p. 7-pp 2006
129. L.I. Pesonen, D.M. Eyers, and J. Bacon Access control in decentralised publish/subscribe systems J Netw 2 2 2007 57 67
130. P. Pietzuch, D. Eyers, S. Kounev, and B. Shand Towards a common API for publish/subscribe in: Proceedings of the 2007 inaugural international conference on distributed event-based systems. ACM, pp. 152-157 2007
131. P.R. Pietzuch Event-based middleware: a new paradigm for wide-area distributed systems in: 6th CaberNet Radicals Workshop 2002
132. P.R. Pietzuch Hermes: a scalable event-based middleware University of Cambridge PhD thesis and TR590 2004
133. M.A. Rahaman, Y. Roudier, A. Schaad, N. Oualha, and M. Önen A publish/subscribe model for secure content driven XML dissemination J Inf Assur Secur 6 1 2010 Available online: http://www.eurecom.fr/publication/3089
134. Rao W., Chen L., Yuan M., S. Tarkoma, and Mei H. Subscription privacy protection in topic-based pub/sub Database systems for advanced applications 2013 Springer 361 376
135. D. Riehle Lessons Learned from Using Design Patterns in Industry Projects Trans Pattern Lang Program 2 2011 1 15
136. G. Russello, L. Mostarda, and N. Dulay A policy-based publish/subscribe middleware for sense-and-react applications J Syst Softw 84 2011 638 654 10.1016/j.jss.2010.10.023
137. M. Salehie, and L. Tahvildari Self-adaptive software: landscape and research challenges ACM Trans Auto Adapt Syst 4 2 2009 10.1145/1516533.1516538 14:1-42
138. R. Sandhu The authorization leap from rights to attributes: maturation or chaos? (Keynote) Proceedings of the 17th ACM Symposium on Access Control Models and Technologies (SACMAT) 2012 ACM 69 70
139. S. Savinov, and P. Alencar A risk management approach for distributed event-based systems Technical Report CS-2014-06, University of Waterloo 2014
140. R.M. Savola, and H. Abie Identification of basic measurable security components for a distributed messaging system in: Procs. 3rd international conference on emerging security information, systems and technologies (SECURWARE). IEEE, Athens, Glyfada, pp. 121-128 2009 10.1109/SECURWARE.2009.26
141. R.M. Savola, and H. Abie Development of measurable security for a distributed messaging system Int J Adv Secur 2 4 2009 358 380
142. R.M. Savola, and P. Heinonen Increasing measurability and meaningfulness of adaptive security monitoring by system architectural design and mechanisms Int J Adv Syst Measur 4 1 & 2 2011 1 19
143. R.M. Savola, H. Abie, J. Bigham, and D. Rotondi Innovations and advances in adaptive secure message oriented middleware in: Procs. 30th international conference on distributed computing systems workshops (ICDCSW). IEEE, Genova, pp. 288-289 2010 10.1109/ICDCSW.2010.70
144. M. Schumacher, E.B. Fernandez, D. Hybertson, F. Buschmann, and P. Sommerlad Security Patterns: Integrating Security and Systems Engineering 1st ed 2006 Wiley
145. D. Schmidt, M. Stal, H. Rohnert, and F. Buschmann Pattern-oriented software architecture 1st ed Patterns for concurrent and networked objects vol. 2 2000 Wiley
146. B. Segall, D. Arnold, T. Boot, M. Henderson, and T. Phelps Content based routing with Elvin4 in: Procs. of AUUG2k 2000
147. B. Shand, P. Pietzuch, I. Papagiannis, K. Moody, M. Migliavacca, D.M. Eyers, and et al. Security policy and information sharing in distributed event-based systems Reasoning in event-based distributed systems 2011 Springer 151 172
148. A. Shikfa, M. Önen, and R. Molva Privacy-preserving content-based publish/subscribe networks D. Gritzalis, J. Lopez, Emerging Challenges for Security, Privacy and Trust (Procs. SEC 2009) 2009 Springer 270 282
149. J. Singh, and J. Bacon Event-based data dissemination control in healthcare D. Weerasinghe, Electronic healthcare, lecture notes of the institute for computer sciences, social informatics and telecommunications engineering 2009 Springer Berlin Heidelberg 167 174
150. J. Singh, L. Vargas, J. Bacon, and K. Moody Policy-based information sharing in publish/subscribe middleware IEEE, pp. 137-144 2008 10.1109/POLICY.2008.17
151. J. Singh, D.M. Eyers, and J. Bacon Disclosure control in multi-domain publish/subscribe systems in: Proceedings of the 5th ACM international conference on distributed event-based system. ACM, pp. 159-170 2011
152. J. Singh, J. Bacon, and D. Eyers Policy enforcement within emerging distributed, event-based systems 2014 ACM Press 246 255 10.1145/2611286.2611310
153. M. Sloman Policy driven management for distributed systems J Netw Syst Manage 2 4 1994 333 360
154. B. Smith, and L. Williams On the effective use of security test patterns In: Procs. 6th IEEE international conference on software security and reliability (SERE), Gaithersburg, MD, USA, IEEE, pp. 108-117 2012
155. E. Solum Achieving over-the-wire configurable confidentiality, integrity, authentication and availability in GridStat's status dissemination Masters thesis; Washington State University 2007
156. E. Solum, C. Hauser, R. Chakravarthy, and D. Bakken Modular over-the-wire configurable security for long-lived critical infrastructure monitoring systems in: Proceedings of the third ACM international conference on distributed event-based systems. ACM, p. 13 2009
157. M. Srivatsa, and Liu L. Securing publish-subscribe overlay services with EventGuard in: Procs. 12th ACM conference on computer and communications security (CCS). ACM, pp. 289-298 2005 10.1145/1102120.1102158
158. M. Srivatsa, and Liu L. Secure event dissemination in publish-subscribe networks in: Procs. 27th international conference on distributed computing systems (ICDCS). pp. 22-22 2007 10.1109/ICDCS.2007.136
159. M. Srivatsa, Liu L., and A. Iyengar EventGuard: a system architecture for securing publish-subscribe networks ACM Trans Comput Syst 29 4 2011 10.1145/2063509.2063510 10:1-40
160. C. Steel, R. Nagappan, and Lai R. Core security patterns: best practices and strategies for J2EE(TM), web services, and identity management 2005 Prentice Hall
161. P. Sutton, R. Arkins, and B. Segall Supporting disconnectedness-transparent information delivery for mobile and invisible computing in: Proceedings of the 1st IEEE/ACM international symposium on cluster computing and the grid, pp. 277-285 2001
162. H. Tajalli, J. Garcia, G. Edwards, and N. Medvidovic PLASMA: a plan-based layered architecture for software model-driven adaptation in: Procs. 2010 IEEE/ACM international conference on automated software engineering (ASE). ACM, pp. 467-476 2010
163. M.A. Tariq Non-functional requirements in publish/subscribe systems Ph.D. thesis; University of Stuttgart 2013
164. M.A. Tariq, B. Koldehofe, A. Altaweel, and K. Rothermel Providing basic security mechanisms in broker-less publish/subscribe systems in: Procs. 4th ACM international conference on distributed event-based systems (DEBS). ACM, pp. 38-49 2010 10.1145/1827418.1827425
165. M.A. Tariq, B. Koldehofe, and K. Rothermel Securing broker-less publish/subscribe systems using identity-based encryption IEEE Trans Parallel Distrib Syst 25 2 2014 518 528 10.1109/TPDS.2013.256
166. S. Tarkoma Mobile middleware: supporting applications and services 2009 Wiley Chichester, U.K.
167. S. Tarkoma Publish / subscribe systems: design and principles 2013 Wiley London; Hoboken, N.J.
168. S. Tarkoma, and K. Raatikainen State of the art review of distributed event systems Minema Events Report C0-04 2006
169. A.V. Uzunov, and E.B. Fernandez An extensible pattern-based library and taxonomy of security threats for distributed systems Comput Stand Interf 36 4 2014 734 747 10.1016/j.csi.2013.12.008 Special Issue on Security in Information Systems: Advances and New Challenges
170. A.V. Uzunov, and E.B. Fernandez Cryptography-based security patterns and security solution frames for networked and distributed systems Submitted for publication 2016
171. A.V. Uzunov, E.B. Fernandez, and K. Falkner Securing distributed systems using patterns: a survey Comput Secur 31 5 2012 681 703 10.1016/j.cose.2012.04.005
172. A.V. Uzunov, E.B. Fernandez, and K. Falkner Engineering security into distributed systems: a survey of methodologies J Univ Comput Sci 18 20 2012 2920 3006 10.3217/jucs-018-20-2920t
173. A.V. Uzunov, K. Falkner, and E.B. Fernandez Decomposing distributed software architectures for the determination and incorporation of security and other non-functional requirements In: Procs. of the 22nd Australian software engineering conference (ASWEC). Melbourne, Australia: IEEE Computer Society, pp. 30-39 2013
174. A.V. Uzunov, E.B. Fernandez, and K. Falkner ASE: a comprehensive pattern-driven security methodology for distributed systems Comput Stand Interf 41 2015 112 137 10.1016/j.csi.2015.02.011
175. A.V. Uzunov, K. Falkner, and E.B. Fernandez A comprehensive pattern-oriented approach to engineering security methodologies Inf Softw Technol 57 2015 217 247 10.1016/j.infsof.2014.09.001
176. A.V. Uzunov, E.B. Fernandez, and K. Falkner Security solution frames and security patterns for authorization in distributed, collaborative systems Comput Secur 55 2015 193 234 10.1016/j.cose.2015.08.003
177. A. Virgillito Publish/Subscribe Communication Systems: from Models to Applications, [PhD Thesis] 2003 Department of Computer and Systems Engineering, University of Rome "La Sapienza" Italy
178. K. Visala, D. Lagutin, and S. Tarkoma LANES: an inter-domain data-oriented routing architecture in: Proceedings of the 2009 workshop on re-architecting the internet. ACM, pp. 55-60 2009
179. K. Visala, D. Lagutin, and S. Tarkoma Security design for an inter-domain publish/subscribe architecture 2011 Springer
180. M. Voelter, M. Kircher, and U. Zdun Remoting Patterns: Foundations of Enterprise, Internet and Realtime Distributed Object Middleware 2005 Wiley
181. Wang J., and J. Bigham Anomaly detection in the case of message oriented middleware Procs. 2008 Workshop on Middleware Security (MidSec) 2008 ACM 40 42
182. Wang C., A. Carzaniga, D. Evans, and A.L. Wolf Security issues and requirements for internet-scale publish-subscribe systems in: System Sciences, 2002. HICSS. Proceedings of the 35th annual Hawaii international conference on. IEEE, pp. 3940-3947 2002
183. Wang C., Liu Y., Gao J., and Ma X. An encryption mechanism based on redundant attributes in multi-domain publish/subscribe networks J Comput Inf Syst 9 7 2013 2861 2871
184. Wang J., J. Bigham, and B. Murciano Towards a resilient message oriented middleware for mission critical applications in: Procs. 2nd international conference on adaptive and self-adaptive systems and applications (ADAPTIVE). pp. 46-51 2010
185. Wang J., Jiang P., J. Bigham, B. Chew, M. Novkovic, and I. Dattani Adding resilience to message oriented middleware in: Procs. 2nd international workshop on software engineering for resilient systems (SERENE). ACM, pp. 89-94 2010
186. D. Weyns, S. Malek, and J. Andersson FORMS: unifying reference model for formal specification of distributed self-adaptive systems ACM Trans Auto Adapt Syst 7 1 2012 10.1145/2168260.2168268 8:1-61
187. D. Weyns, B. Schmerl, V. Grassi, S. Malek, R. Mirandola, C. Prehofer, and et al. On patterns for decentralized control in self-adaptive systems R. de Lemos, H. Giese, H.A. Müller, M. Shaw, Software engineering for self-adaptive systems II Lecture notes in computer science vol. 7475 2013 Springer Berlin Heidelberg 76 107
188. A. Wun, and H.-A. Jacobsen A policy management framework for content-based publish/subscribe middleware Middleware 2007 2007 Springer 368 388
189. A. Wun, A. Cheung, and H.-A. Jacobsen A taxonomy for denial of service attacks in content-based publish/subscribe systems in: Proceedings of the 2007 inaugural international conference on distributed event-based systems (DEBS), ACM, pp. 116-127 2007 10.1145/1266894.1266917
190. Xiao Y. Security in distributed, grid, mobile, and pervasive computing 2007 Auerbach Publications Boca Raton
191. Yan Y., Huang Y., G. Fox, S. Pallickara, M.E. Pierce, A. Kaplan, and et al. Implementing a prototype of the security framework for distributed brokering systems Security and Management 2003 Citeseer 212 218
192. Yang H., M. Kim, K. Karenos, Ye F., and Lei H. Message-oriented middleware with QoS awareness Service-oriented computing 2009 Springer 331 345
193. Y. Yoon Adaptation techniques for publish/subscribe overlays Ph.D. thesis; University of Toronto 2013
194. Yuan E., N. Esfahani, and S. Malek A systematic survey of self-protecting software systems ACM Trans Auto Adapt Syst 8 4 2014 10.1145/2555611 17:1-41
195. Zhao Y., and D.C. Sturman Dynamic access control in a content-based publish/subscribe system with delivery guarantees Procs. 26th IEEE International Conference on Distributed Computing Systems (ICDCS) 2006 IEEE Computer Society 60 68
196. Zou X., and B. Ramamurthy Magliveras SS. Secure Group Communications Over Data Networks 1st ed 2010 Springer