Skip to main content
SpringerLink
Log in

Towards a Secure Rendezvous Network for Future Publish/Subscribe Architectures

  • Conference paper
Future Internet - FIS 2010 (FIS 2010)

Part of the book series: Lecture Notes in Computer Science ((LNCCN,volume 6369))

Included in the following conference series:

Abstract

Publish/Subscribe is often regarded as a promising paradigm for Future Internet architectures. Its information oriented nature and its particular security features have stimulated current research efforts which aim at applying publish/subscribe principles to a clean-slate Internet architecture. One of the core components of publish/subscribe architectures is the rendezvous network. Any security failure that a rendezvous network may face will probably jeopardize the operation of the whole (inter-)network. In this paper we highlight security requirements and potential security issues of rendezvous networks and we present security solutions that can be applied in order to shield them.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. PSIRP Project Website, http://www.psirp.org (Last accessed April 2010)

  2. CCNx Project Website, http://www.ccnx.org (Last accessed April 2010)

  3. Eugster, P.T., Felber, P.A., Guerraoui, R., Kermarrec, A.M.: The many faces of publish/subscribe. ACM Computing Surveys (CSUR) 35(2), 131 (2003)

    Article  Google Scholar 

  4. Castro, M., Druschel, P., Kermarrec, A.M., Rowstron, A.I.T.: SCRIBE: A large-scale and decentralized application-level multicast infrastructure. IEEE Journal on Selected Areas in communications 20(8), 1489–1499 (2002)

    Article  Google Scholar 

  5. Huang, Y., Garcia-Molina, H.: Publish/subscribe in a mobile environment. Springer Wireless Networks 10(6), 643–652 (2004)

    Article  Google Scholar 

  6. Koponen, T., Chawla, M., Chun, B.G., Ermolinskiy, A., Kim, K.H., Shenker, S., Stoica, I.: A data-oriented (and beyond) network architecture. ACM SIGCOMM Computer Communication Review 37(4), 192 (2007)

    Article  Google Scholar 

  7. Stoica, I., Adkins, D., Ratnasamy, S., Shenker, S., Surana, S., Zhuang, S.: Internet indirection infrastructure. In: Springer Peer-to-Peer Systems, pp. 192–202 (2008)

    Google Scholar 

  8. Fotiou, N., Polyzos, G.C., Trossen, D.: Illustrating a Publish-Subscribe In- ternet Architecture. In: Future Internet Architectures: New Trends in Service Architectures (2nd Euro-NF Workshop) (2009)

    Google Scholar 

  9. Stoica, I., Morris, R., Karger, D., Kaashoek, M.F., Balakrishnan, H.: Chord: A scalable peer-to-peer lookup service for internet applications. In: Proceedings of the 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, p. 160 (2001)

    Google Scholar 

  10. Rowstron, A., Druschel, P.: Pastry: Scalable, distributed object location and routing for large-scale peer-to-peer systems. In: Guerraoui, R. (ed.) Middleware 2001. LNCS, vol. 2218, pp. 329–350. Springer, Heidelberg (2001)

    Chapter  Google Scholar 

  11. Ratnasamy, S., Francis, P., Handley, M., Karp, R., Schenker, S.: A scalable content-addressable network. In: Proceedings of the 2001 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications, p. 172 (2001)

    Google Scholar 

  12. Wang, C., Carzaniga, A., Evans, D., Wolf, A.: Security issues and requirements for Internet-scale publish-subscribe systems. In: Proceedings of the 35th Annual Hawaii International Conference on System Sciences, pp. 3940–3947 (2002)

    Google Scholar 

  13. Lagutin, D., Visala, K., Zahemszky, A., Burbridge, T., Marias, G.F.: Roles and Security in a Publish/Subscribe Network Architecture. To appear in IEEE Symposium on Computers and Communications (2010)

    Google Scholar 

  14. Lioy, A., Maino, F., Marian, M., Mazzocchi, D.: DNS security. In: Proceedings of the TERENA Networking Conference (2000)

    Google Scholar 

  15. Ramasubramanian, V., Sirer, E.G.: Perils of transitive trust in the domain name system. In: Proceedings of the Internet Measurement Conference, IMC (2005)

    Google Scholar 

  16. Sit, E., Morris, R.: Security considerations for peer-to-peer distributed hash tables. In: Druschel, P., Kaashoek, M.F., Rowstron, A. (eds.) IPTPS 2002. LNCS, vol. 2429, pp. 261–269. Springer, Heidelberg (2002)

    Chapter  Google Scholar 

  17. Douceur, J.: The Sybil attack. Peer-to-Peer Systems, pp. 251–260. Springer, Heidelberg (2002)

    Book  MATH  Google Scholar 

  18. Singh, A., Castro, M., Druschel, P., Rowstron, A.: Defending against eclipse attacks on overlay networks. In: Proceedings of the 11th Workshop on ACM SIGOPS European Workshop, p. 21 (2004)

    Google Scholar 

  19. Wun, A., Cheung, A., Jacobsen, H.A.: A taxonomy for denial of service attacks in content-based publish/subscribe systems. In: Proceedings of the 2007 Inaugural International Conference on Distributed Event-Based Systems, p. 127. ACM, New York (2007)

    Google Scholar 

  20. Tarkoma, S.: Preventing Spam in Publish/Subscribe. In: Proceedings of the 26th IEEE International Conference on Distributed Computing Systems Workshops, p. 21 (2006)

    Google Scholar 

  21. Bethencourt, J., Sahai, A., Waters, B.: Ciphertext-policy attribute-based encryption. In: IEEE Symposium on Security and Privacy, SP 2007, pp. 321–334 (2007)

    Google Scholar 

  22. Srivatsa, M., Liu, L.: Securing publish-subscribe overlay services with event-guard. In: Proceedings of the 12th ACM Conference on Computer and Communications Security, pp. 298 (2005)

    Google Scholar 

  23. Pallickara, S., Pierce, M., Gadgil, H., Fox, G., Yan, Y., Huang, Y.: A Framework for Secure End-to-End Delivery of Messages in Publish/Subscribe Systems. In: Proceedings of the 7th IEEE/ACM International Conference on Grid Computing (GRID 2006), pp. 28–29 (2006)

    Google Scholar 

  24. Miklos, Z.: Towards an access control mechanism for wide-area publish/subscribe systems. In: Proceedings 22nd International Conference on Distributed Computing Systems Workshops, pp. 516–521 (2002)

    Google Scholar 

  25. Belokosztolszki, A., Eyers, D.M., Pietzuch, P.R., Bacon, J., Moody, K.: Role-based access control for publish/subscribe middleware architectures. In: Proceedings of the 2nd International Workshop on Distributed Event-Based Systems, p. 8 (2003)

    Google Scholar 

  26. Bacon, J., Moody, K., Yao, W.: A model of OASIS role-based access control and its support for active security. ACM Transactions on Information and System Security (TISSEC) 5(4), 492–540 (2002)

    Article  Google Scholar 

  27. Baden, R., Bender, A., Spring, N., Bhattacharjee, B., Starin, D.: Persona: An online social network with user-defined privacy. ACM SIGCOMM Computer Communication Review 39(4), 135–146 (2009)

    Article  Google Scholar 

  28. Gentry, C.: Fully homomorphic encryption using ideal lattices. In: Proceedings of the 41st annual ACM symposium on Theory of Computing, pp. 169–178 (2009)

    Google Scholar 

  29. Ambainis, A.: Upper bound on the communication complexity of private information retrieval. In: Springer Automata, Languages and Programming, pp. 401–407 (1997)

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Athens University of Economics and Business, Athens, Greece

    Nikos Fotiou, Giannis F. Marias & George C. Polyzos

Authors
  1. Nikos Fotiou
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Giannis F. Marias
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. George C. Polyzos
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. SINTEF Information and Communication Technology, Forskningsveien 1, 0373, Oslo, Norway

    Arne J. Berre

  2. Facultad de Informática, Ontoloy Engineering Group, Universidad Politécnica de Madrid, Campus de Montegancedo, sn, 18660, Boadilla del Monte, Spain

    Asunción Gómez-Pérez

  3. Faculty of Computer Science, institute of distributed and Multimedia Systems, University of Vienna, Universitätsstr. 10/T 11, 1090, Vienna, Austria

    Kurt Tutschku

  4. University of Innsbruck, Technikerstr. 21a, 6020, Innsbruck, Austria

    Dieter Fensel

Rights and permissions

Reprints and permissions

Copyright information

© 2010 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Fotiou, N., Marias, G.F., Polyzos, G.C. (2010). Towards a Secure Rendezvous Network for Future Publish/Subscribe Architectures. In: Berre, A.J., Gómez-Pérez, A., Tutschku, K., Fensel, D. (eds) Future Internet - FIS 2010. FIS 2010. Lecture Notes in Computer Science, vol 6369. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-15877-3_6

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-15877-3_6

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-15876-6

  • Online ISBN: 978-3-642-15877-3

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation