Análisis comparativo a nivel transaccional de brokers MQTT (Mosquitto, Mosca y Emq) con respecto a la disponibilidad en infraestructuras IoT ante ataques DDoS

Abstract

In this project, the development of IoT (Internet of things) infrastructures is presented as proofs of concept evaluating three different MQTT Brokers (Mosquitto, Mosca and EMQ) against DDoS attacks. The objective of the project is to provide information on which of them is optimal with respect to availability, considering four quality metrics (KPI's-Key performance indicator): 1) MTTD-Mean Time to Detect, 2) MTTR-Mean Time to Resolve, 3) MTTF-Mean Time to Failure, and 4) MTBF-Mean Time Between Failures. For the development of the project, two methodologies were applied. The first methodology corresponds to the XP development methodology and the second corresponds to the comparative method, which allowed us to satisfactorily fulfill each objective set forth in the project. For this, we start with the identification of the central problem and data collection for subsequent analysis. In accordance with the literature review, a practical case was prepared. During the implementation of the IoT infrastructures, certain differences were evident with each of the MQTT Brokers and during the tests with two tools used for DDoS attacks: Metasploit (SYNFLOOD) and LOIC (Low Orbit Ion Cannon), essential data was collected for subsequent interpretation of results. As conclusion, it was possible to determine which broker is optimal. Additionally, recommendations were prepared before starting a project with this type of emerging technologies.