基于发布／订阅系统的安全管理平台设计

目前,安全管理平台建设向着大规模协同工作的方向发展.本文首先提出一个采用基于内容的发布/订阅系统设计的安全管理平台,使其具有良好的可扩展性和动态接入特性,为协同管理提供了良好的体系保证;然后提出一个发布/订阅传输协议,在有限隐私共享的假设前提下,运用bloom filter 和信任等级解决发布/订阅路由协议与安全保护冲突,并对协议的保密性、匿名性、隐私性等安全特性做了分析;最后以模拟测试验证了此协议的可行性.

Design of Security Management Platform Based on Publish-subscribe System

The development trend of Security Management Platform (SMP) is large-scale and cooperation. This paper first gives a design of scalable and dynamic access SMP based on content-based Pub/Sub system, then proposes a Pub/Sub transport protocol,using bloom filter and trust rank to solve the conflict between route and security requirement on the premises of limited privacy share,and provides a security analysis on confidentiality, anonymity and privacy. Finally, a simulate test verifies the feasibility of propos...