🤖 AI Summary
This study addresses the security vulnerabilities of the MQTT protocol in Internet of Things (IoT) environments, where the absence of robust encryption and authentication mechanisms renders it susceptible to eavesdropping, message tampering, denial-of-service attacks, and brute-force exploits. For the first time, this work systematically reproduces and evaluates a range of representative MQTT attacks within a high-fidelity smart home simulation environment. By integrating theoretical protocol analysis with empirical validation, the research uncovers critical implementation-level security flaws inherent in widely deployed MQTT systems. Building on these findings, the paper proposes targeted mitigation strategies, practical security hardening measures, and deployment best practices, thereby offering actionable guidance for securing real-world MQTT deployments.
📝 Abstract
This paper analyzes the security of the Message Queuing Telemetry Transport (MQTT) protocol in the context of the Internet of Things (IoT). The main objective consists of identifying vulnerabilities and proposing security improvements. Adopting a hybrid methodology, a theoretical review was combined with an experimental demonstration in a simulated Smart Home environment. Eavesdropping, Tampering, Denial of Service (DoS), and Brute Force attacks were executed and analyzed. The results evidenced critical risks due to the absence of robust encryption and authentication. Finally, mitigation strategies and best practices are proposed to strengthen MQTT implementations.