Skip to main content
placeholder image

Towards a cryptographic treatment of publish/subscribe systems

Journal Article


Download full-text (Open Access)

Abstract


  • Publish/subscribe mechanism is a typical many-to-many messaging paradigm when multiple applications want to receive the same message or when a group of applications would like to notify each other. Nonetheless, there exist only a few works that address the security issues for content-based publish/subscribe systems formally. Although the security requirements have been partially addressed by Wang et al., there is no formal definition for all of these security requirements in the literature. As a result, most of the existing schemes do not have any security proof and it is difficult to justify whether those schemes are really secure in practice. Furthermore, there is no comprehensive scheme that satisfies the most essential security requirements at the same time. In this paper, we introduce the first security model for important security requirements of content-based publish/subscribe systems. We also give a new security requirement for publisher authenticity, which means that the publisher is authenticated to publish certain types of notification only, and cannot publish other types of notification. We then exhibit a new scheme which fulfills most of the security requirements. Furthermore, we also provide a comprehensive proof for our concrete construction according to the new model. © 2014 IOS Press.

UOW Authors


  •   Yuen, Tsz Hon (external author)
  •   Susilo, Willy
  •   Mu, Yi (external author)

Publication Date


  • 2014

Citation


  • Yuen, T. Hon., Susilo, W. & Mu, Y. (2014). Towards a cryptographic treatment of publish/subscribe systems. Journal of Computer Security, 22 (1), 33-67.

Scopus Eid


  • 2-s2.0-84893963014

Ro Full-text Url


  • http://ro.uow.edu.au/cgi/viewcontent.cgi?article=4076&context=eispapers

Ro Metadata Url


  • http://ro.uow.edu.au/eispapers/3060/

Number Of Pages


  • 34

Start Page


  • 33

End Page


  • 67

Volume


  • 22

Issue


  • 1

Abstract


  • Publish/subscribe mechanism is a typical many-to-many messaging paradigm when multiple applications want to receive the same message or when a group of applications would like to notify each other. Nonetheless, there exist only a few works that address the security issues for content-based publish/subscribe systems formally. Although the security requirements have been partially addressed by Wang et al., there is no formal definition for all of these security requirements in the literature. As a result, most of the existing schemes do not have any security proof and it is difficult to justify whether those schemes are really secure in practice. Furthermore, there is no comprehensive scheme that satisfies the most essential security requirements at the same time. In this paper, we introduce the first security model for important security requirements of content-based publish/subscribe systems. We also give a new security requirement for publisher authenticity, which means that the publisher is authenticated to publish certain types of notification only, and cannot publish other types of notification. We then exhibit a new scheme which fulfills most of the security requirements. Furthermore, we also provide a comprehensive proof for our concrete construction according to the new model. © 2014 IOS Press.

UOW Authors


  •   Yuen, Tsz Hon (external author)
  •   Susilo, Willy
  •   Mu, Yi (external author)

Publication Date


  • 2014

Citation


  • Yuen, T. Hon., Susilo, W. & Mu, Y. (2014). Towards a cryptographic treatment of publish/subscribe systems. Journal of Computer Security, 22 (1), 33-67.

Scopus Eid


  • 2-s2.0-84893963014

Ro Full-text Url


  • http://ro.uow.edu.au/cgi/viewcontent.cgi?article=4076&context=eispapers

Ro Metadata Url


  • http://ro.uow.edu.au/eispapers/3060/

Number Of Pages


  • 34

Start Page


  • 33

End Page


  • 67

Volume


  • 22

Issue


  • 1