Collusion defender : preserving subscribers’ privacy in publish and subscribe systems

Cui, S, Belguith, S ORCID: https://orcid.org/0000-0003-0069-8552, De Alwis, P, Asghar, MR and Russello, G 2019, 'Collusion defender : preserving subscribers’ privacy in publish and subscribe systems' , IEEE Transactions on Dependable and Secure Computing .

[img]
Preview
PDF - Accepted Version
Download (2MB) | Preview

Abstract

The Publish and Subscribe (pub/sub) system is an established paradigm to disseminate the data from publishers to subscribers in a loosely coupled manner using a network of dedicated brokers. However, sensitive data could be exposed to malicious entities if brokers get compromised or hacked; or even worse, if brokers themselves are curious to learn about the data. A viable mechanism to protect sensitive publications and subscriptions is to encrypt the data before it is disseminated through the brokers. State-of-the-art approaches allow brokers to perform encrypted matching without revealing publications and subscriptions. However, if malicious brokers collude with malicious subscribers or publishers, they can learn the interests of innocent subscribers, even when the interests are encrypted.

In this article, we present a pub/sub system that ensures confidentiality of publications and subscriptions in the presence of untrusted brokers. Furthermore, our solution resists collusion attacks between untrusted brokers and malicious subscribers (or publishers). Finally, we have implemented a prototype of our solution to show its feasibility and efficiency.

Index Terms: Collusion Resistance, Secure Pub/sub, Subscribers’ Privacy, Publications’ Confidentiality

Item Type: Article
Additional Information: © 2019 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Schools: Schools > School of Computing, Science and Engineering
Journal or Publication Title: IEEE Transactions on Dependable and Secure Computing
Publisher: IEEE
ISSN: 1545-5971
Related URLs:
Depositing User: Dr. Sana Belguith
Date Deposited: 04 Feb 2019 14:27
Last Modified: 10 Nov 2019 16:17
URI: http://usir.salford.ac.uk/id/eprint/49953

Actions (login required)

Edit record (repository staff only) Edit record (repository staff only)