SECURITY ANALYSIS OF MESSAGE QUEUING TELEMETRY TRANSPORT (MQTT) PROTOCOL ON THE INTERNET OF THINGS APPLICATIONS

• Main Author: Audina Anindyasari, Riska
• Format: Theses
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/54485
• Institution: Institut Teknologi Bandung

nowadays Internet of Things (IoT) become critical part of human life, many aspect and activity use the advantages of this technology. One of the main components in IoT implementation is Communication. Message Queue Telemetry Transport (MQTT) become one of the most popular protocol that used for IoT Communication. MQTT use publish/subscribe pattern for its communication, the client does not need to know the existence of another client, so that any authentication process is done on the broker side. On the other hand, many problems arise especially in security issue in MQTT protocol because by default MQTT does not use encrypted communication. TLS/SSL can be implemented in MQTT protocol to protect network communication. In this paper we present IoT implementation for smart gates and security analysis for MQTT Communication that implementing TLS/SSL. In addition, for the convenience of sustainable IoT development, we also propose the use of OTA firmware updates as a technique used for IoT system development, accompanied by security verification of communication between the firmware server and nodeMCU as well as verification of security in communication between dashboard management and firmware servers.