Reproduce “Security assessment of common open source MQTT brokers and clients” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Edoardo Di Paolo, Enrico Bassetti, Angelo Spognardi
Researchers from Sapienza University of Rome conducted an empirical security assessment of common open-source MQTT brokers and clients using a custom fuzzer, revealing deviations from the MQTT standard in message handling. The study uncovered potential Denial of Service vulnerabilities and system inconsistencies across several popular implementations, including a real-world IoT device, due to non-standard behaviors.
Key insights
- Significant deviations from the MQTT v3.1.1 standard exist across multiple popular open-source implementations, particularly in Quality of Service (QoS) and topic length handling.
- These deviations can lead to critical security issues, including Denial of Service (DoS) conditions, message loss, system inconsistencies, and potential replay attacks.
- A custom fuzzer capable of fine-grained packet manipulation is crucial for uncovering subtle vulnerabilities that standard client libraries or basic functional testing might not reveal.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.