On adding replies to publish-subscribe
Proceedings of the 2007 inaugural international conference on Distributed event-based systems
Towards a common API for publish/subscribe
Proceedings of the 2007 inaugural international conference on Distributed event-based systems
Proceedings of the ACM/IFIP/USENIX 2003 International Conference on Middleware
A policy management framework for content-based publish/subscribe middleware
Proceedings of the ACM/IFIP/USENIX 2007 International Conference on Middleware
Traceability and timeliness in messaging middleware
OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part II
Composite event detection as a generic middleware extension
IEEE Network: The Magazine of Global Internetworking
| Hi-index | 0.00 |
As messaging middleware technology matures, users demand increasingly many features, leading to modular middleware architectures. However, extra complexity increases the risk of a security breach, arising from a vulnerability in one module or misconfiguration of the module linkages. This position paper presents a framework for enforcing security policies between middleware modules, which simultaneously facilitates co-design of application and middleware security. For example, a healthcare application might require (1) all clinical data to be encrypted in transit, (2) a log of all messages sent and delivered (revealing no disclosive patient information), and (3) parameterised role based access control on message delivery. In our framework, we can satisfy all of these requirements, even when each feature is implemented as a separate extension module: extensions tag events with meta-data, and this meta-data guides the enforcement of the security policy. Exposing this meta-data to applications can help to unite application and middleware security policy.