Prevention and Mitigation of Attacks on MQTT
Neenu Kuriakose · International Journal for Research in Applied Science and Engineering Technology · 2021
The Internet of Things (IoT) is ready to transform the quality of life and offer new business opportunities with a variety of its applications. However, the benefits of this emerging paradigm go hand in hand with major cyber security issues. Lack of robust cyber security measures to protect IoT systems can lead to cyber-attacks targeting all levels of IoT infrastructure including IoT devices, IoT communication agreements and services that access IoT data. Various IoT malware such as Mirai, BASHLITE and BrickBot show attacks already based on IoT devices and the use of infected IoT devices to launch other cyberattacks. However, as the ongoing deployment and operation of IoT depends largely on the implementation of effective data communication protocols, attacks on other layers of IoT construction are expected to increase. In the IoT country, the rule of publish / -subscribe based Message Queuing Telemetry Transport (MQTT) is very popular. Therefore, cyber security threats to the MQTT protocol are expected to grow in proportion to its increasing use by IoT manufacturers. The purpose of this paper is to explore and understand how security violations can be prevented and reduced in the MQTT protocol to increase its overall safety.