Security of Message Queue Telemetry Transport Protocol

Yerlikaya Ö., Dalkılıç G.

25th Signal Processing and Communications Applications Conference (SIU), Antalya, Türkiye, 15 - 18 Mayıs 2017 identifier identifier

  • Yayın Türü: Bildiri / Tam Metin Bildiri
  • Cilt numarası:
  • Doi Numarası: 10.1109/siu.2017.7960353
  • Basıldığı Şehir: Antalya
  • Basıldığı Ülke: Türkiye
  • Anahtar Kelimeler: Internet of things, MQTT, authentication, data privacy
  • Dokuz Eylül Üniversitesi Adresli: Evet

Özet

In this study, the Internet of things is defined and lightweight protocols that the devices can use to communicate with each other are specified, and message queue telemetry transport (MQTT) protocol, which is designed to he used for restricted devices, is detailed. In the scope of this paper, the studies about the authentication of the objects and the confidentiality of the data have been examined, some suggestions have been made against the identified security vulnerabilities. In the scope of this paper, as the test environment, Mosquitto, the server of the MQTT protocol, and MongoDB in order to store the data were installed. In the prepared test environment, the objects were communicated with each other via the MQTT protocol and identity verification and security vulnerabilities were tried to be detected.