Attacks on Availability of IoT Middleware Protocols: A Case Study on MQTT

Authors : Mustafa Muhammed ŞİMŞEK, Emrah ATILGAN

Pages : 16-27

Doi:10.53608/estudambilisim.1297052

View : 113 | Download : 61

Publication Date : 2023-06-30

Article Type : Research Paper

Abstract :The Internet of Things insert ignore into journalissuearticles values(IoT); encompasses a technological ecosystem that improves the daily lives of individuals by increasing productivity, safety, comfort, health and sustainability. In addition, the IoT brings a variety of benefits to many industries, including increased efficiency, productivity and cost savings. However, the proliferation of IoT technologies has revealed many security vulnerabilities, especially in the middleware layer. In this article, we presented possible attacks on availability of middleware layer messaging protocols. In the research, a comprehensive case study was carried out, especially focusing on the MQTT insert ignore into journalissuearticles values(Message Queuing Telemetry Transport); protocol. We performed Man-in-the-Middle insert ignore into journalissuearticles values(MitM);, Denial of Service insert ignore into journalissuearticles values(DoS); and Brute-Force attacks in our experimental environment. The effects and results of the attacks made in cases where the connection to the MQTT protocol is made with a user name and password, and when the user name and password are not used are examined. The results of the attacks that emerged in the different scenarios created were evaluated and the precautions to be taken to protect against the attacks were discussed.
Keywords : Nesnelerin İnterneti, MQTT, ESP8266, Ortadaki Adam Saldırıları, Hizmet Reddi Saldırıları, Kaba Kuvvet Saldırıları

ORIGINAL ARTICLE URL