Open AccessSecurity Assessment of the MQTT-SN Protocol for the Internet of Things
Author(s) -
José Roldán-Gómez,
Javier Carrillo-Mondéjar,
Juan Manuel Castelo Gómez,
José Luis Martínez
Publication year - 2022
Publication title -
journal of physics. conference series
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.21
H-Index - 85
eISSN - 1742-6596
pISSN - 1742-6588
DOI - 10.1088/1742-6596/2224/1/012079
Subject(s) - mqtt , computer science , message queue , computer network , protocol (science) , computer security , the internet , internet of things , internet layer , internet protocol , world wide web , medicine , alternative medicine , pathology
The Internet of Things (IoT) is growing globally at a fast pace. However, the expansion of the IoT paradigm has brought with it the challenge of promptly detecting and evaluating attacks against these systems. The Message Queuing Telemetry Transport (MQTT) protocol is one of the most used protocols in the IoT scenario due to its lightness. The MQTT-SN protocol, which is an even lighter version of MQTT, is specially designed for embedded devices on non-TCP/IP networks. This paper presents an exhaustive assessment of the MQTT-SN protocol and describes its shortcomings, which can allow an attacker to compromise the security of the entire IoT infrastructure. We have designed 3 different attacks in order to allow us to evaluate the different security impacts on a real MQTT-SN network. All the attacks were implemented and tested, and we show how they work and their impact on performance. Furthermore, a non-attacked scenario was also implemented to allow us to compare the performance of an attacked system with that of system without attacks.