On Securing Publish-Subscribe Systems with Security Groups

In this paper, we present a secure publish-subscribe service conceived to support cooperation between organizations. The service is based on the notion of security group, an overlay composed of brokers representing organizations that guarantees confidentiality and integrity in end-to-end delivery of messages and supports clients mobility. A security group is dynamic and can be formed only by trusted brokers, i.e., brokers fulfilling the group admission policy. An early prototype of the system has been implemented.