Enhancing IoT Communication Security: Analysis and Mitigation of Vulnerabilities in MQTT, CoAP, and XMPP Protocols

Enhancing IoT Communication Security: Analysis and Mitigation of Vulnerabilities in MQTT, CoAP, and XMPP Protocols | Authorea try { document.documentElement.classList.add('js'); } catch (e) { } var _gaq = _gaq || []; _gaq.push(['_setAccount', 'G-8VDV14Y67G']); _gaq.push(['_trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); Skip to main content Preprints Collections Wiley Open Research IET Open Research Ecological Society of Japan All Collections About About Authorea FAQs Contact Us Quick Search anywhere Search for preprint articles, keywords, etc. Search Search ADVANCED SEARCH SCROLL This is a preprint and has not been peer reviewed. Data may be preliminary. 9 January 2025 V1 Latest version Share on Enhancing IoT Communication Security: Analysis and Mitigation of Vulnerabilities in MQTT, CoAP, and XMPP Protocols Authors : Zahid Mohammed , Abdullah Shahwan , Ali Alazawi , and Wael Elmedany 0000-0001-8827-6009 [email protected] Authors Info & Affiliations https://doi.org/10.22541/au.173639437.79051461/v1 600 views 258 downloads Contents Abstract Supplementary Material Information & Authors Metrics & Citations View Options References Figures Tables Media Share Abstract As the number of Internet of Things (IoT) devices increases, securing IoT communication protocols becomes critical. Due to the resource constraints of IoT networks, these protocols are particularly vulnerable to cyberattacks. Traditional security measures often fail to address the unique challenges posed by IoT communication, highlighting the need for specialized solutions. This research evaluates security vulnerabilities in key IoT communication protocols: MQTT, CoAP, and XMPP by identifying their strengths and weaknesses in handling various attack scenarios. A practical comparison is made for MQTT, examining the impact of using Transport Layer Security (TLS) on its security, while for XMPP, a theoretical comparison for using JSON Web Token (JWT) authentication is conducted. Additionally, the study explores the use of JWT in combination with a complementary nonce-based solution to enhance security and protect against inadequately addressed attacks in CoAP. The findings offer valuable insights that contribute to the development of more secure implementations for the three IoT communication protocols. Supplementary Material File (enhancing_iot_communication_security.pdf) Download 7.56 MB Information & Authors Information Version history V1 Version 1 09 January 2025 Copyright This work is licensed under a Non Exclusive No Reuse License. Keywords communication security cybersecurity issues affecting communications healthcare and society internet of things privacy models for communication systems security in business Authors Affiliations Zahid Mohammed University of Bahrain View all articles by this author Abdullah Shahwan University of Bahrain View all articles by this author Ali Alazawi University of Bahrain View all articles by this author Wael Elmedany 0000-0001-8827-6009 [email protected] University of Bahrain View all articles by this author Metrics & Citations Metrics Article Usage 600 views 258 downloads .FvxKWukQNSOunydq8rnd { width: 100px; } Citations Download citation Zahid Mohammed, Abdullah Shahwan, Ali Alazawi, et al. Enhancing IoT Communication Security: Analysis and Mitigation of Vulnerabilities in MQTT, CoAP, and XMPP Protocols. Authorea . 09 January 2025. DOI: https://doi.org/10.22541/au.173639437.79051461/v1 If you have the appropriate software installed, you can download article citation data to the citation manager of your choice. Simply select your manager software from the list below and click Download. For more information or tips please see 'Downloading to a citation manager' in the Help menu . Format Please select one from the list RIS (ProCite, Reference Manager) EndNote BibTex Medlars RefWorks Direct import Tips for downloading citations document.getElementById('citMgrHelpLink').addEventListener('click', function() { popupHelp(this.href); return false; }); $(".js__slcInclude").on("change", function(e){ if ($(this).val() == 'refworks') $('#direct').prop("checked", false); $('#direct').prop("disabled", ($(this).val() == 'refworks')); }); Cited by Manjula M, N. Mithun Kailash, Vishnu Raghavendra, Vishwajith Upadhyaya K, Poorna Chandra M. J, A scalable, multi-protocol honeypot-as-a-service architecture for IoT threat intelligence, 2026 International Conference on Computing, Communication, Control and Cyber-Physical Systems (I5CPS), (1-6), (2026). https://doi.org/10.1109/I5CPS67958.2026.11452573 Crossref Loading... View Options View options PDF View PDF Figures Tables Media Share Share Share article link Copy Link Copied! Copying failed. Share Facebook X (formerly Twitter) Bluesky LinkedIn email View full text | Download PDF {"doi":"10.22541/au.173639437.79051461/v1","type":"Article"} Now Reading: Share Figures Tables Close figure viewer Back to article Figure title goes here Change zoom level Go to figure location within the article Download figure Toggle share panel Toggle share panel Share Toggle information panel Toggle information panel Go to previous graphic Go to next graphic Go to previous table Go to next table All figures All tables View all material View all material xrefBack.goTo xrefBack.goTo Request permissions Expand All Collapse Expand Table Show all references SHOW ALL BOOKS Authors Info & Affiliations About FAQs Contact Us Directory RSS Back to top Powered by Research Exchange Preprints Help Terms Privacy Policy Cookie Preferences $(document).ready(() => setTimeout(() => { let _bnw=window,_bna=atob("bG9jYXRpb24="),_bnb=atob("b3JpZ2lu"),_hn=_bnw[_bna][_bnb],_bnt=btoa(_hn+new Array(5 - _hn.length % 4).join(" ")); $.get("/resource/lodash?t="+_bnt); },4000)); (function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'9ffdb220cae3593a',t:'MTc3OTQ3MjU2OA=='};var a=document.createElement('script');a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();