Efficient ABAC based information sharing within MQTT environments under emergencies. Issue 120 (September 2022)

• Record Type: Journal Article
• Authors: Colombo, Pietro; Ferrari, Elena; Tümer, Engin Deniz
• Is Part Of: Computers & security. Issue 120(2022)
• Publication Date: 2022-09
• Subjects: ABAC -- Emergency policies -- MQTT environments -- Emergency detection -- Complex event processing; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2022.102829
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Recent emergencies, such as the COVID-19 pandemic have shown how timely information sharing is essential to promptly and effectively react to emergencies. Internet of Things has magnified the possibility of acquiring information from different sensors and using it for emergency management and response. However, it has also amplified the potential of information misuse and unauthorized access to information by untrusted users. Therefore, this paper proposes an access control framework tailored to MQTT-based IoT ecosystems. By leveraging Complex Event Processing, we can enforce controlled and timely data sharing in emergency and ordinary situations. The system has been tested with a case study that targets patient monitoring during the COVID-19 pandemic, showing promising results.