A Robust Security Scheme Based on Enhanced Symmetric Algorithm for MQTT in the Internet of Things

Abstract

Message Queuing Telemetry Transport (MQTT) is expected to be the de facto messaging IoT standard. Therefore, MQTT must achieve efficient security. Nevertheless, the most significant drawback of the MQTT is its lack of protection mechanisms. Meanwhile, the existing approaches have added processing overhead to the devices and are still vulnerable to various attacks. Therefore, this research work presented an integrated scheme known as the Robust Security Scheme (RSS) to protect the MQTT against any exploitations that might result in sophisticated cyberattacks. The proposed RSS employs two cryptosystems:(1) a dynamic variant of the Advanced Encryption Standard (D-AES) and (2) Key-Policy Attribute-Based Encryption (KP-ABE). RSS introduces a new design architecture of the symmetric AES algorithm to encrypt the MQTT payload called D-AES. Additionally, the second part of the proposed hybrid cryptosystem is KP-ABE, which is utilized to cipher the private key of the proposed D-AES to avoid the computation overhead of bilinear maps. The performance of the proposed RSS is measured in terms of processing time and traffic overhead. Additionally, the security aspects are evaluated in terms of balance, avalanche effect, and hamming distance and compared to the existing works in a testbed environment. Results revealed that the proposed D-AES is more promising with improvements than the standard AES algorithm. The proposed scheme achieves polymorphism while maintaining interoperability. RSS exhibited improvements over the standard AES algorithm by 8.75%, 10.45%, and 6.81% in terms of balance, avalanche effect, and hamming distance, respectively.

A Literature Review on the Role of Internet of Things, Computer Vision, and Sound Analysis in a Smart Poultry Farm

“…MQTTS (MQTT with DTLS security) is deployed to save data from security breaches during transmission between the gateway and edge. One of the data encryption techniques like advanced encryption standard (AES), triple DES (3DES), or elliptic curve cryptography (ECC) can be applied at the edge as per hardware considerations. CoAP with DTLS is used to save data from security breaches during transmission between sensing nodes and the gateway.…”

A Survey on Key Agreement and Authentication Protocol for Internet of Things Application

“…Under the same testing condition, the battery consumption in MQTT with SSL/TLS is four times that of without SSL/TLS [91]. Recent research focuses on optimizing authentication and key agreement for MQTT suitable for resource-constrained devices in IoT [92], [93], [94]. Cipher suites with Curve 25519 and RSA in TLS 1.3 protocol perform significantly better on computation than P-256 and ECDSA suites while providing the same security level [95].…”