Security, Privacy and Forensic Concern of MQTT Protocol

Anthraper, Joseph Jose; Kotak, Jaidip

doi:10.2139/ssrn.3355193

Cited by 32 publications

(13 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The authors of [ 104 , 105 ] presented a security analysis between MQTT and CoAP with a specific focus on the transport protocol utilised MQTT with TLS and CoAP with DTLS. Furthermore, the comparative examination took into account security modes such as Raw Public Key, Certificates and Pre-Shared Key.…”

Section: Security Solutions For Iot and Industrial Systemsmentioning

confidence: 99%

Internet of Things for System Integrity: A Comprehensive Survey on Security, Attacks and Countermeasures for Industrial Applications

Abosata

Al‐Rubaye

Tsourdos

et al. 2021

Sensors

View full text Add to dashboard Cite

The growth of the Internet of Things (IoT) offers numerous opportunities for developing industrial applications such as smart grids, smart cities, smart manufacturers, etc. By utilising these opportunities, businesses engage in creating the Industrial Internet of Things (IIoT). IoT is vulnerable to hacks and, therefore, requires various techniques to achieve the level of security required. Furthermore, the wider implementation of IIoT causes an even greater security risk than its benefits. To provide a roadmap for researchers, this survey discusses the integrity of industrial IoT systems and highlights the existing security approaches for the most significant industrial applications. This paper mainly classifies the attacks and possible security solutions regarding IoT layers architecture. Consequently, each attack is connected to one or more layers of the architecture accompanied by a literature analysis on the various IoT security countermeasures. It further provides a critical analysis of the existing IoT/IIoT solutions based on different security mechanisms, including communications protocols, networking, cryptography and intrusion detection systems. Additionally, there is a discussion of the emerging tools and simulations used for testing and evaluating security mechanisms in IoT applications. Last, this survey outlines several other relevant research issues and challenges for IoT/IIoT security.

show abstract

Section: Security Solutions For Iot and Industrial Systemsmentioning

confidence: 99%

Internet of Things for System Integrity: A Comprehensive Survey on Security, Attacks and Countermeasures for Industrial Applications

Abosata

Al‐Rubaye

Tsourdos

et al. 2021

Sensors

View full text Add to dashboard Cite

show abstract

“…Taher et al [15] building an IoT-cloud system to collect and process medical data. The system by the authors has full features, however, operating based on the MQTT protocol, there are many weaknesses in the security mechanisms [16] and the brokering architecture [8] that may cause single point failure.…”

Section: A Iot Architecture For Healthcarementioning

confidence: 99%

IoHT-MBA: An Internet of Healthcare Things (IoHT) Platform based on Microservice and Brokerless Architecture

Thanh¹,

Phien²,

Nguyen³

et al. 2021

IJACSA

View full text Add to dashboard Cite

Internet of Thing (IoT), currently, is one of the technology trends that are most interested. IoT can be divided into five main areas including: Health-care, Environmental, Smart city, Commercial and Industrial. The IoHT-MBA Platform is considered the backbone of every IoT architecture, so the optimal design of the IoHT-MBA Platform is essential issue, which should be carefully considered in the different aspects. Although, IoT is applied in multiple domains, however, there are still three main features that are challenge to improve: i) data collection, ii) users, devices management, and iii) remote device control. Today's medical IoT systems, often too focused on the big data or access control aspects of participants, but not focused on collecting data accurately, quickly, and efficiently; power redundancy and system expansion. This is very important for the medical sector -which always prioritizes the availability of data for therapeutic purposes over other aspects. In this paper, we introduce the IoHT Platform for Healthcare environment which is designed by microservice and brokerless architecture, focusing strongly on the three aforementioned characteristics. In addition, our IoHT Platform considers the five other issues including (1) the limited processing capacity of the devices, (2) energy saving for the device, (3) speed and accurate of the data collection, (4) security mechanisms and (5) scalability of the system. Also, in order for the IoHT Platform to be suitable for the field of health monitoring, we also add realtime alerts for the medical team. In the evaluation section, moreover, we describe the evaluation to prove the effectiveness of the proposed IoHT Platform (i.e. the proof-of-concept) in the performance, non-error, and non affected by geographical distance. Finally, a complete code solution is publicized on the authors' GitHub repository to engage further reproducibility and improvement.

show abstract

“…Lundgren et al [15] indicates that we can obtain data by subscribing to any topic of the MQTT broker that is public on the internet -a serious security risk. If the attacker subscribes to MQTT topics with the client ID, the victim will experience a denial of service status and all information sent to the victim is passed on to the attacker -a serious risk factor [16]. Regarding the Authentication mechanism, MQTT supports authentication by username and password pairs, but the authentication mechanism is optional and not encrypted.…”

Section: Introductionmentioning

confidence: 99%

SIP-MBA: A Secure IoT Platform with Brokerless and Micro-service Architecture

Thanh¹,

Phien²,

Nguyen³

et al. 2021

IJACSA

View full text Add to dashboard Cite

The Internet of Things is one of the most interesting technology trends today. Devices in the IoT network are often geared towards mobility and compact in size, thus having a rather weak hardware configuration. There are many light weight protocols, tailor-made suitable for limited processing power and low energy consumption, of which MQTT is the typical one. The current MQTT protocol supports three types of qualityof-service (QoS) and the user has to trade-off the security of the packet transmission by transmission rate, bandwidth and energy consumption. The MQTT protocol, however, does not support packet storage mechanisms which means that when the receiver is interrupted, the packet cannot be retrieved. In this paper, we present a broker-less SIP-MBA Platform, designed for micro-service and using gRPC protocol to transmit and receive messages. This design optimizes the transmission rate, power consumption and transmission bandwidth, while still meeting reliability when communicating. Besides, we implement users and things management mechanisms with the aim of improving security issues. Finally, we present the test results by implementing a collect data service via gRPC protocol and comparing it with streaming data by using the MQTT protocol.

show abstract

Security, Privacy and Forensic Concern of MQTT Protocol

Cited by 32 publications

References 30 publications

Internet of Things for System Integrity: A Comprehensive Survey on Security, Attacks and Countermeasures for Industrial Applications

Internet of Things for System Integrity: A Comprehensive Survey on Security, Attacks and Countermeasures for Industrial Applications

IoHT-MBA: An Internet of Healthcare Things (IoHT) Platform based on Microservice and Brokerless Architecture

SIP-MBA: A Secure IoT Platform with Brokerless and Micro-service Architecture

Contact Info

Product

Resources

About