1. Security of Message Queue Telemetry Transport Protocol
- Author
-
Ozlem Yerlikaya and Gokhan Dalkilic
- Subjects
MQTT ,Authentication ,Scope (project management) ,Computer science ,business.industry ,05 social sciences ,050801 communication & media studies ,020206 networking & telecommunications ,02 engineering and technology ,Computer security ,computer.software_genre ,0508 media and communications ,Telemetry ,0202 electrical engineering, electronic engineering, information engineering ,Identity (object-oriented programming) ,business ,Message queue ,Protocol (object-oriented programming) ,computer ,Computer network - Abstract
In this study, the Internet of things is defined and lightweight protocols that the devices can use to communicate with each other are specified, and message queue telemetry transport (MQTT) protocol, which is designed to be used for restricted devices, is detailed. In the scope of this paper, the studies about the authentication of the objects and the confidentiality of the data have been examined, some suggestions have been made against the identified security vulnerabilities. In the scope of this paper, as the test environment, Mosquitto, the server of the MQTT protocol, and MongoDB in order to store the data were installed. In the prepared test environment, the objects were communicated with each other via the MQTT protocol and identity verification and security vulnerabilities were tried to be detected.
- Published
- 2017