Comparación experimental de protocolos de comunicación de IOT en cuanto a la seguridad de transmisión de datos en dispositivos IOT de cobertura WLAN

Abstract

This article aims to perform an analysis of IoT security protocols within a WAN network, through an experimental and systematic methodology, based on the collection of information for the selection of protocols. These protocols will be subjected to an ARP Spoofing attack to visualize the vulnerabilities that may occur in each protocol, the information collected is done using the wireshark sniffer that allowed the capture of packets for analysis. By performing the procedure, it was determined that in the MQTT, COAP, WEBSOCKET protocols it was possible to execute an ARP poisoning which captured information in plain text as the interaction that is performed by GET and POST methods. It was possible to visualize the communication ports on which the IoT device and the platform are interacting with the user. According to the tests performed, it was determined that the most secure protocol is MQTT, since it presented fewer vulnerabilities in the tests performed, i.e., the interaction between this protocol and the Thinger.io platform showed data encrypted by the TLS/SSL protocol despite being captured by the sniffer.