Third International Workshop on Distributed Event-Based Systems DEBS 2004 May 24–25, 2004 Edinburgh, Scotland, UK Workshop Organization Program Co-Chairs Antonio Carzaniga University of Colorado, USA Pascal Fenkam Vienna University of Technology, Austria Program Committee Bernhard Aichernig United Nations University, Macau Jean Bacon University of Cambridge, UK Gianpaolo Cugola Politecnico di Milano, Italy Juergen Dingel Queen’s University, Canada Gabi Dreo-Rodosek Leibniz Supercomputing Center, Germany Schahram Dustdar Caramba Labs, Austria Jose´ Luiz Fiadeiro University of Leicester, UK Ludger Fiege Darmstadt University of Technology, Germany David Garlan Carnegie Mellon University, USA Manfred Hauswirth Swiss Federal Institute of Technology Lausanne (EPFL), Switzerland Paola Inverardi University of L’Aquila, Italy H.-Arno Jacobsen University of Toronto, Canada Mehdi Jazayeri Vienna University of Technology, Austria J.-P. Martin-Flatin CERN, Switzerland Cecilia Mascolo University College London, UK Peter Pietzuch University of Cambridge, UK Ivana Podnar University of Zagreb, Croatia David Rosenblum University College London, UK Rob Strom IBM T.J. Watson Research, USA Joe Sventek University of Glasgow, Scotland Peter Triantafillou University of Patras, Greece Table of Contents Industrial Challenges in Working with Events . 1 P. Dini A Self-Organizing Crash-Resilient Topology Management System for Content-Based Publish/Subscribe . 3 R. Baldoni, R. Beraldi, L. Querzoni, and A. Virgillito The Event-Based Paradigm in Collaborative Product Data Management: A Case Study . 9 M. Caporuscio and P. Inverardi Efficient Subscription Management in Content-Based Networks . 14 R. Chand and P.A. Felber HOMED: A Peer-to-Peer Overlay Architecture for Large-Scale Content-Based Publish/Subscribe Systems . 20 Y. Choi, K Park, and D. Park Dealing with Heterogeneous Data in Pub/Sub Systems: The Concept-Based Approach . 26 M. Cilia, M. Antollini, C. Bornhoevd, and A. Buchmann Extending Message-Oriented Middleware Using Interception . 32 E. Curry, D. Chambers, and G. Lyons On Methodologies for Constructing Correct Event-Based Applications . 38 P. Fenkam, M. Jazayeri, and G. Reif Security Aspects in Publish/Subscribe Systems . 44 L. Fiege, A. Zeidler, A. Buchmann, R. Kilian-Kehr, and G. Muhl¨ Secure Selecticast for Collaborative Intrusion Detection Systems . 50 P. Gross, J. Parekh, and G. Kaiser Service-Oriented Event Correlation—Workflow and Information Modeling Approached . 56 A. Hanemann and D. Schmitz Towards an Architecture for Reasoning about Complex Event-Based Dynamic Situations . 62 G. Jakobson, J. Buford, and L. Lewis An Extended Publish/Subscribe Protocol for Transparent Subscriptions to Distributed Abstract State in Sensor-Driven Systems Using Abstract Events . 68 E. Katsiri, J. Bacon, and A. Mycroft Providing Content-Based Services in a Peer-to-Peer Environment . 74 G. Perng, C. Wang, and M. Reiter Supporting Mobility with Persistent Notifications in Publish/Subscribe Systems . 80 I. Podnar and I. Lovrek Federating Heterogeneous Event Services . 86 C. Ryan, R. Meier, and V. Cahill Self-Stabilizing Routing in Publish-Subscribe Systems . 92 Z. Shen and S. Tirthapura Fault-Tolerance in the SMILE Stateful Publish-Subscribe System . 98 R. Strom Content-Based Publish-Subscribe Over Structured P2P Networks . 104 P. Triantafillou and I. Aekaterinidis A Transformational Framework for Testing and Model Checking Implicit-Invocation Systems . 110 H. Zhang, J.S. Bradbury, J.R. Cordy, and J. Dingel ii Industrial Challenges in Working with Events Petre Dini Cisco Systems, Inc., USA, and Concordia University, Canada Event-based systems, event-driven management systems, event-based applications, publish/subscribe systems, content-based networking, event-processing, incident handling events, intrusion detection events, application- related events, configuration-change events, and other similar event-based expressions capture so much semantic and complexity that each in turn deserves a special presentation. There is a growing consensus between practition- ers and scientists on event taxonomy, event processing operations (filtering, correlating, aggregation, etc.), tem- poral representation, and the system requirements to receive, subscribe, process, and deliver events. Nonetheless, the hot industrial challenges in management systems to producing, handling and reacting to events are shadowed by very simple problems that are yet unsolved problems across the industry. These problems are in the definition, interoperability, and implementation. This talk will briefly illustrate several angles of current concerns, through use cases covering device instrumen- tation, network protocols, domain-oriented application, and management applications. The declared target is to identify challenges and raise appropriate questions, open to a large debate. Some issues may have immediate and simple solutions; others may be simply postponed, due to the lack of feasible and testable solutions. At the device instrumentation level, we will tackle the loose and strong events forms, and their related notions of simple, complex, and preprocessed events, with examples from Syslog-based and SNMP-based systems. Issues related to the performance of parsing and tagging in normal and high speed networks will be analyzed. We will then focus on some versioning and version conversion aspects concerning SNMP-events’ OIDs and naming, the inconsistency in definition/implementation of mandatory/optional recommendations, and the reliability and scalability in event systems at this level. Generic concerns relate to the temporal issues. In general, multiple timestamps make event processing difficult. On the other hand, some device types may not have clocks at all., and some types of networks may well tolerate delays and clock inconsistencies. A uniform representation of the timestamps, which is still under consideration in standards, will be briefly discussed. Linking the events to the system behavior raises the problem of a common syntax, if not a common semantic. Alternatively, event conversions and format translations are needed. Domain-oriented events are the most chal- lenging for system interactions and event processing, as we count a growing number of heterogeneous formats covering intrusion detection, accounting, fault, performance, incident, vulnerability, state change, etc. The mes- sage intended by this talk is that an educated event design and a consistent implementation could dramatically reduce the set of real concerns, regardless of the systems used to handle (transport, process, and react to) the events, and independent of the technology used for supporting that design (e.g., CORBA, JMS, and TIBCO). The talk will also cover several basic solutions that are under development at Cisco Systems, Inc., and that are intended to be ported towards standards. These solutions are especially related to reporting complex semantic behavior, embedded preprocessing directives, and smart buffering mechanisms for reliable events. Several remaining questions will be used as a basis for an open debate. These questions are related to the workshop topics, but they also expand to new industrial paradigms. These paradigms, which include utility-based computing, autonomic computing, diagnosis in-the-box, diagnosis out-of-box, adaptable applications, self-adaptable applica- tions, and reflexive environments require a new approach to formalizing events, architecting event-based systems, and integrating such systems. GRID systems, for example, introduce the concept of intermittent and partial be- havior related to resource sharing, which may require a special semantic on SLA/QoS violation events. Events related to traffic patterns and the dynamics of performance and availability changes also require particular metrics and processing. Another hot area, quite poorly covered in terms of event-related requirements, is MPLS OAM and all aspects related to MPLS VPN. The talk will discuss why these areas are perceived as hot topics in industrial research, and where the challenging issues are. Petre Dini is a senior technical leader and principal architect with Cisco Systems, Inc., being responsible for policy-based strategic architectures and protocols for network management, QoS/SLA, performance, pro- grammable networks and services, provisioning under QoS constraints, and consistent service manageability. He’s industrial research interests include mobile systems, performance, scalability, and policy-related issues in 1 GRID networks. He’s also working on particular issues in multimedia systems concerning traffic patterns and se- curity. He worked on various industrial applications including CAD/CAM, nuclear plant monitoring, and real-time embedded software. In early 90’s he worked on various Pan-Canadian projects related to object-oriented manage- ment applications for distributed systems, and to broadband services in multimedia applications. As a Researcher at the Computer Science Research Institute of Montreal he coordinated many projects on distributed software and management architectures. In this period he was an Adjunct Professor with McGill University, Montreal, Canada, and a Canadian representative in the European projects. Since 1998 he was with AT&T Labs, as a senior technical manager, focusing on distributed QoS, SLA, and Performance in content delivery services. Petre is the IEEE ComSoc Committee Chair of Dynamic Policy-Based Control in Distributed Systems, and in- volved in the innovative NGOSS industrial initiative