Formal specification, verification and evaluation of the MQTT protocol in the Internet of Things

Houimli, Manel; Kahloul, Laïd; Benaoun, Sihem

doi:10.1109/mathit.2017.8259720

Cited by 39 publications

(13 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Most of the works related to MQTT protocol available in the literature focus on performance evaluation (Fehrenbach, 2017;Gündoğan et al, 2018;Lee et al, 2013;Luzuriaga et al, 2015;Scalagent, 2015;Thangavel et al, 2014;Yokotani & Sasaki, 2016), proposing security enhancements to the existing protocol (Mektoubi et al, 2016;Shin et al, 2016;Singh et al, 2015), formal modelling (Aziz, 2016;Houimli et al, 2017) and security evaluation (Andy et al, 2017;Firdous et al, 2017;Perrone et al, 2017).…”

Section: Literature Reviewmentioning

confidence: 99%

Denial of service attack detection through machine learning for the IoT

Syed

Baig

Ibrahim

et al. 2020

Journal of Information and Telecommunication

View full text Add to dashboard Cite

Sustained Internet of Things (IoT) deployment and functioning are heavily reliant on the use of effective data communication protocols. In the IoT landscape, the publish/subscribe-based Message Queuing Telemetry Transport (MQTT) protocol is popular. Cyber security threats against the MQTT protocol are anticipated to increase at par with its increasing use by IoT manufacturers. In particular, IoT is vulnerable to protocol-based Application layer Denial of Service (DoS) attacks, which have been known to cause widespread service disruption in legacy systems. In this paper, we propose an Application layer DoS attack detection framework for the MQTT protocol and test the scheme on legitimate and protocol compliant DoS attack scenarios. To protect the MQTT message brokers from such attacks, we propose a machine learning-based detection framework developed for the MQTT protocol. Through experiments, we demonstrate the impact of such attacks on various MQTT brokers and evaluate the effectiveness of the proposed framework to detect these malicious attacks. The results obtained indicate that the attackers can overwhelm the server resources even when legitimate access was denied to MQTT brokers and resources have been restricted. In addition, the MQTT features we have identified showed high attack detection accuracy. The field size and length-based features drastically reduced the false-positive rates and are suitable in detecting IoT based attacks.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Denial of service attack detection through machine learning for the IoT

Syed

Baig

Ibrahim

et al. 2020

Journal of Information and Telecommunication

View full text Add to dashboard Cite

show abstract

“…El modelado acompaña cada una de las actividades del ciclo de vida de desarrollo de un producto. En la bibliografía se hallan referencias a: Lenguajes de modelado (Eterovic, Kaljic, Donko, Salihbegovic, & Ribic, 2015), Ingeniería de sistemas basada en modelos (Papke, 2017), y Especificación, análisis y verificación mediante métodos formales (Houimli, Kahloul, & Benaoun, 2017), (Latif, Afzaal, & Zafar, 2017), , (Robles-Ramirez, Escamilla-Ambrosio, & Tryfonas, 2017).…”

Section: Modeladounclassified

Internet del Futuro – Estudio de tecnologías IoT

González¹,

Sofía²,

Laguía³

et al. 2020

ICTUNPA

View full text Add to dashboard Cite

Este trabajo proporciona una visión general del paradigma Internet de las Cosas (IoT) apuntando a las aplicaciones, arquitecturas, protocolos, tecnologías, y problemas pendientes y oportunidades para la investigación, tal como puede encontrarse en literatura reciente. El trabajo comienza proveyendo marcos históricos y conceptuales breves. A continuación, se profundiza en temas teóricos como las soluciones verticales, arquitecturas propuestas, protocolos específicos y tecnologías comerciales. También se revisan problemas concernientes al marco legal, todavía por desarrollarse. El postulado básico de IoT es la colaboración entre sensores inteligentes para realizar tareas innovadoras sin intervención humana. Sin embargo, avances recientes indican que serán posibles aplicaciones más potentes combinando IoT con cierto grado de inteligencia, previamente reservado a la nube. El objetivo principal de este informe es proporcionar un marco de trabajo inicial que permita a los investigadores iniciarse rápidamente en la materia, y al mismo tiempo, enfatizar la importancia de la identificación y desarrollo de aplicaciones. El trabajo concluye recomendando especial atención al modelado de sistemas IoT, a los protocolos de aplicación de tiempo real, y a la computación fog.

show abstract

“…Various works, e.g. [17], [18], [19], [20], [21], have addressed issues with the reliability and security of the protocol using a variety of formal methods. Most notably, in [17], [18], it was discovered that the informal semantics of the protocol contained subtle ambiguities that undermined the protocol's correctness.…”

Section: Related Workmentioning

confidence: 99%

Modeling and Analyzing an Industry 4.0 Communication Protocol

Aziz

2020

IEEE Internet Things J.

View full text Add to dashboard Cite

The increasing complexity and criticality of industrial automation systems, embodied by the concept of Industry 4.0, which brings together concepts like Cyber-physical systems, the Internet-of-Things, Big Data and Artificial Intelligence, calls for more formality in specifying the technology standards underlying these systems. We define in this paper a formal model of an Industry 4.0 machine-2-machine communication protocol, Hermes, used in specifying electronic board transfers in an assembly line. Our analysis of the formal specification reveals that, despite the robustness of the protocol, many testing scenarios have been ignored in the protocol standard and in particular, scenarios that include simultaneous machine errors. Therefore, our work paves the way for a better informed testing strategy in Industry 4.0 systems that implement the protocol.

show abstract

Formal specification, verification and evaluation of the MQTT protocol in the Internet of Things

Cited by 39 publications

References 15 publications

Denial of service attack detection through machine learning for the IoT

Denial of service attack detection through machine learning for the IoT

Internet del Futuro – Estudio de tecnologías IoT

Modeling and Analyzing an Industry 4.0 Communication Protocol

Contact Info

Product

Resources

About