基于发布/订阅系统的安全管理平台设计

Design of Security Management Platform Based on Publish-subscribe System

目前,安全管理平台建设向着大规模协同工作的方向发展。本文首先提出一个采用基于内容的发布/订阅系统设计的安全管理平台,使其具有良好的可扩展性和动态接入特性,为协同管理提供了良好的体系保证;然后提出一个发布/订阅传输协议,在有限隐私共享的假设前提下,运用bloomfilter和信任等级解决发布/订阅路由协议与安全保护冲突,并对协议的保密性、匿名性、隐私性等安全特性做了分析;最后以模拟测试验证了此协议的可行性。

The development trend of Security Management Platform （SMP） is large-scale and cooperation. This paper first gives a design of scalable and dynamic access SMP based on content-based Pub/Sub system, then proposes a Pub/ Sub transport protocol, using bloom filter and trust rank to solve the conflict between route and security requirement on the premises of limited privacy share, and provides a security analysis on confidentiality, anonymity and privacy. Finally, a simulate test verifies the feasibility of proposed protocol by performance optimization.