IoT Security: Trends, Challenges, and Solutions for MQTT-Based Devices
Youness Belaadel, Houda Moudni, Hicham Zougagh, Mohamed Er-rouidi, Samir Elouaham · 2024
Incorporating the Internet of Things (IoT) into our society has gained significant technological momentum. This important progress has enabled seamless changes in corporate operations and services. However, the widespread use of this tech-nology also poses a significant security threat, which has become a top worry for many enterprises across the globe. This study highlights the key vulnerabilities in the MQ Telemetry Transport (MQTT) protocol used in IoT devices, including exposure to DDoS attacks, compromising service availability, and Man-in-the-Middle (MITM) attacks exploiting plaintext transmission of credentials, risking data confidentiality. Additionally, it discusses information disclosure vulnerabilities, inadequate authentication, and identity spoofing as further risks. These findings emphasize the importance of vigorous security measures, such as encryption and strong access control, to protect MQTT-based IoT devices.