Subscription Privacy Protection in Topic-Based Pub/Sub

Rao, Weixiong; Chen, Lei; Yuan, Mingxuan; Tarkoma, Sasu; Mei, Hong

doi:10.1007/978-3-642-37487-6_28

Cited by 3 publications

(6 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In fact, a malicious subscriber can share her subscriptions in cleartext with the broker, which can leak the subscriptions of innocent subscribers. This issue was addressed by Rao et al in [13] and [15]. Specifically, Rao et al use a trusted engine to cloak and encrypt the subscriptions before sending to the broker (R4: ).…”

Section: Related Workmentioning

confidence: 99%

“…For the payload encryption, [13], [15], [16], [18]- [21] use symmetric encryption, which is much more efficient than ABE and lattice-based encryption. However, symmetric encryption requires all the Pubs and Subs to share the encryption key.…”

Section: B Comparison With Other Pub/sub Systemsmentioning

confidence: 99%

“…Unfortunately, there is little work done on collusion attacks in the context of secure pub/sub systems [14]. In our literature review, we found that only the schemes proposed in [13], [15], [16] resist collusion attacks between malicious subscribers (or publishers) and brokers. However, all these approaches require publishers and subscribers to communicate directly to protect their privacy against colluding parties.…”

Section: Introductionmentioning

confidence: 97%

See 2 more Smart Citations

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Cui

Belguith

Alwis

et al. 2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

The Publish and Subscribe (pub/sub) system is an established paradigm to disseminate the data from publishers to subscribers in a loosely coupled manner using a network of dedicated brokers. However, sensitive data could be exposed to malicious entities if brokers get compromised or hacked; or even worse, if brokers themselves are curious to learn about the data. A viable mechanism to protect sensitive publications and subscriptions is to encrypt the data before it is disseminated through the brokers. State-of-the-art approaches allow brokers to perform encrypted matching without revealing publications and subscriptions. However, if malicious brokers collude with malicious subscribers or publishers, they can learn the interests of innocent subscribers, even when the interests are encrypted. In this article, we present a pub/sub system that ensures confidentiality of publications and subscriptions in the presence of untrusted brokers. Furthermore, our solution resists collusion attacks between untrusted brokers and malicious subscribers (or publishers). Finally, we have implemented a prototype of our solution to show its feasibility and efficiency.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: B Comparison With Other Pub/sub Systemsmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 97%

See 1 more Smart Citation

Collusion Defender: Preserving Subscribers’ Privacy in Publish and Subscribe Systems

Cui

Belguith

Alwis

et al. 2021

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

show abstract

“…In fact, a malicious subscriber can share her subscriptions in cleartext with the broker, which can leak the subscriptions of honest subscribers. This issue was addressed by Rao et al in [7], [8]. Since then, all the proposals have assumed that the broker can not collude with any subscriber [9], [12], [19].…”

Section: Related Workmentioning

confidence: 99%

“…In [8] and [7], Rao et al use a trusted engine to cloak the subscriptions before sending to the broker. As a result, the subscribers get more publications than they require.…”

Section: Related Workmentioning

confidence: 99%

Malicious Entities are in Vain: Preserving Privacy in Publish and Subscribe Systems

Cui

Belguith

Alwis

et al. 2018

2018 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications/ 12th IEEE International

View full text Add to dashboard Cite

Publish and subscribe (pub/sub) system is a decoupled communication paradigm that allows routing of publications. Through a set of dedicated third party servers, referred to as brokers, publications are disseminated without establishing any link between publishers and subscribers. However, the involvement of these brokers raises security and privacy issues as they can harvest sensitive data about subscribers. Furthermore, a malicious broker may collude with malicious subscribers and/or publishers to infer subscribers' interests. Our solution is such that subscribers' interests are not revealed to curious brokers and published data can only be accessed by the authorised subscribers. Moreover, the proposed protocol is secure against the collusion attacks between malicious brokers, publishers, and subscribers.

show abstract