Security Analysis of a Communication Protocol: MQTT
This paper analyzes MQTT security in IoT, demonstrating critical vulnerabilities like eavesdropping and DoS due to weak encryption and authentication, and proposes mitigation strategies.
Abstract
More Like ThisThis paper analyzes the security of the Message Queuing Telemetry Transport (MQTT) protocol in the context of the Internet of Things (IoT). The main objective consists of identifying vulnerabilities and proposing security improvements. Adopting a hybrid methodology, a theoretical review was combined with an experimental demonstration in a simulated Smart Home environment. Eavesdropping, Tampering, Denial of Service (DoS), and Brute Force attacks were executed and analyzed. The results evidenced critical risks due to the absence of robust encryption and authentication. Finally, mitigation strategies and best practices are proposed to strengthen MQTT implementations.