Security of Message Queue Telemetry Transport Protocol

In this study, the Internet of things is defined and lightweight protocols that the devices can use to communicate with each other are specified, and message queue telemetry transport (MQTT) protocol, which is designed to be used for restricted devices, is detailed. In the scope of this paper, the studies about the authentication of the objects and the confidentiality of the data have been examined, some suggestions have been made against the identified security vulnerabilities. In the scope of this paper, as the test environment, Mosquitto, the server of the MQTT protocol, and MongoDB in order to store the data were installed. In the prepared test environment, the objects were communicated with each other via the MQTT protocol and identity verification and security vulnerabilities were tried to be detected.