Abstract:<p>In recent years, with the rapid development of smart city, prevalent pub/sub (publish/subscribe) streaming systems have been increasingly employed as upstream middleware layer in multi-tenant edge clouds, and feed large volume of data gathered from IoT devices of different tenants into downstream systems (e.g., data analytics and warehouse). A shared tenancy model where multiple untrusted applications or tenants utilize the same pub/sub system is generally exploited in edge cloud, which poses crucial challenges including privacy-sensitive data/metadata access threat and critical metadata modification by unauthorized tenants. A centralized monitoring node is invariably adopted in existing security strategies (such as ACL, TLS), which causes the pub/sub streaming model vulnerable to external malicious attacks and single point failure.</p><p>In this paper, inspired by outstanding features of blockchain including tamper-resistance, decentralization, strong consistency, and traceability, we propose BPS, a general and decentralized Blockchain-enhanced Pub/Sub communication model for multi-tenant edge cloud, to redesign pub/sub system internal security mechanisms. Specifically, by exploiting blockchain technology, BPS can detect the illegal operations and behaviors from both malicious tenants and untrusted publishers or subscribers. BPS directly leverages Merkel Hash Tree (MHT) of blockchain to verify the integrity of critical and confidential metadata. Regarding authorization, BPS introduces smart-contract-enabled fine-grained control over partition topic-classified messages by storing access control list (ACL) into an append-only blockchain ledger. Additionally, an incentive mechanism is employed in BPS to reward honest publishers and subscribers. We implement BPS prototype based on Kafka and EoS blockchain. Our security analysis and extensive experiments demonstrate that BPS outperforms the state-of-the-art pub/sub streaming system Kafka in security with minimal performance overhead.</p>

An Implementation of Content-Based Pub/Sub System via Stream Computation

A Distributed P2P Ordering System Accepting Mass Real-Time Broadcasting

An efficient content-based notification service routed over p2p network

A peer-to-peer approach to large-scale content-based publish-subscribe

ConSub: Incentive-Based Content Subscribing in Selfish Opportunistic Mobile Networks

Graph-pubsub

Feverfew: a Scalable Coverage-Based Hybrid Overlay for Internet-scale Pub/sub Networks.

JTangPS: Content-Based Publish/Subscribe over Structured P2P Networks.

JTangCSPS: A Composite and Semantic Publish/subscribe System over Structured P2P Networks.

Progressive online aggregation in a distributed stream system

Content Subscribing Mechanism in P2P Streaming Based on Gamma Distribution Prediction

Pub/Sub on Stream

A Potential Field Based Framework for Publish/Subscribe Service in P2P Cloud

CoopStreaming: a novel peer-to-peer system for fast live media streaming

HIPPO: an Adaptive, Scalable, Hierarchical P2PLive Streaming System

Scalable and Elastic Event Matching for Attribute-Based Publish/Subscribe Systems

BPS: A reliable and efficient pub/sub communication model with blockchain-enhanced paradigm in multi-tenant edge cloud

A Fair Comparison of Message Queuing Systems

Ripple: A publish/subscribe service for multidata item updates propagation in the cloud

Live Video Streaming Service over Peer to Peer Network: Design, Implementation and Experience

SpeedStream: A real-time stream data processing platform in the cloud.