{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T05:34:39Z","timestamp":1740548079184,"version":"3.38.0"},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T00:00:00Z","timestamp":1740528000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T00:00:00Z","timestamp":1740528000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EURASIP J. on Info. Security"],"DOI":"10.1186\/s13635-025-00194-7","type":"journal-article","created":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T01:26:21Z","timestamp":1740533181000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Hiding identities of MQTT devices against a global network adversary"],"prefix":"10.1186","volume":"2025","author":[{"given":"Sara","family":"Lazzaro","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vincenzo","family":"De Angelis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Francesco","family":"Buccafurri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,2,26]]},"reference":[{"key":"194_CR1","unstructured":"OASIS, MQTT version 5.0 (2019). https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v5.0\/mqtt-v5.0.pdf.\u00a0Accessed 24 Feb 2025"},{"key":"194_CR2","doi-asserted-by":"publisher","unstructured":"T. Yokotani, Y. Sasaki, in 2016 International Conference on Control, Electronics, Renewable Energy and Communications (ICCEREC). Comparison with http and mqtt on required network resources for iot (2016), pp. 1\u20136. https:\/\/doi.org\/10.1109\/ICCEREC.2016.7814989","DOI":"10.1109\/ICCEREC.2016.7814989"},{"key":"194_CR3","doi-asserted-by":"publisher","unstructured":"R.K. Kodali, S. Soratkal, in 2016 IEEE Region 10 Humanitarian Technology Conference (R10-HTC). Mqtt based home automation system using esp8266 (2016), pp. 1\u20135. https:\/\/doi.org\/10.1109\/R10-HTC.2016.7906845","DOI":"10.1109\/R10-HTC.2016.7906845"},{"key":"194_CR4","doi-asserted-by":"publisher","unstructured":"S. Lazzaro, V. De Angelis, A.M. Mandalari, F. Buccafurri, in 2024 IEEE International Conference on Pervasive Computing and Communications (PerCom). Is your kettle smarter than a hacker? A scalable tool for assessing replay attack vulnerabilities on consumer iot devices (2024), pp. 114\u2013124. https:\/\/doi.org\/10.1109\/PerCom59722.2024.10494466","DOI":"10.1109\/PerCom59722.2024.10494466"},{"issue":"13","key":"194_CR5","doi-asserted-by":"publisher","first-page":"2132","DOI":"10.1177\/09544054211014488","volume":"235","author":"C Yeh","year":"2021","unstructured":"C. Yeh, S. Chen, I. Li, Implementation of mqtt protocol based network architecture for smart factory. Proc Inst. Mech. Eng. B J. Eng. Manuf. 235(13), 2132\u20132142 (2021). https:\/\/doi.org\/10.1177\/09544054211014488","journal-title":"Proc Inst. Mech. Eng. B J. Eng. Manuf."},{"key":"194_CR6","doi-asserted-by":"publisher","unstructured":"M. Lucchese, F. Lupia, M. Merro, F. Paci, N. Zannone, A. Furfaro, in Proceedings of the 18th International Conference on Availability, Reliability and Security. Honeyics: A high-interaction physics-aware honeynet for industrial control systems, ARES \u201923 (Association for Computing Machinery, New York, 2023). https:\/\/doi.org\/10.1145\/3600160.3604984","DOI":"10.1145\/3600160.3604984"},{"key":"194_CR7","doi-asserted-by":"publisher","unstructured":"F. Lupia, M. Lucchese, M. Merro, N. Zannone, in 2023 IEEE International Conference on Big Data (BigData). Ics honeypot interactions: A latitudinal study (2023), pp. 3025\u20133034. https:\/\/doi.org\/10.1109\/BigData59044.2023.10386497","DOI":"10.1109\/BigData59044.2023.10386497"},{"key":"194_CR8","doi-asserted-by":"publisher","first-page":"275","DOI":"10.1016\/j.aej.2023.01.065","volume":"69","author":"HH Alshammari","year":"2023","unstructured":"H.H. Alshammari, The internet of things healthcare monitoring system based on mqtt protocol. Alex. Eng. J. 69, 275\u2013287 (2023). https:\/\/doi.org\/10.1016\/j.aej.2023.01.065","journal-title":"Alex. Eng. J."},{"key":"194_CR9","doi-asserted-by":"publisher","unstructured":"A. Mohan, in 2014 IEEE International Conference on Distributed Computing in Sensor Systems. Cyber security for personal medical devices internet of things (2014), pp. 372\u2013374. https:\/\/doi.org\/10.1109\/DCOSS.2014.49","DOI":"10.1109\/DCOSS.2014.49"},{"issue":"2","key":"194_CR10","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1145\/857076.857078","volume":"35","author":"PT Eugster","year":"2003","unstructured":"P.T. Eugster, P.A. Felber, R. Guerraoui, A.M. Kermarrec, The many faces of publish\/subscribe. ACM Comput. Surv. 35(2), 114\u2013131 (2003). https:\/\/doi.org\/10.1145\/857076.857078","journal-title":"ACM Comput. Surv."},{"key":"194_CR11","doi-asserted-by":"crossref","unstructured":"S. Berlato, U. Morelli, R. Carbone, S. Ranise, in Data and Applications Security and Privacy XXXVI, ed. by S. Sural, H. Lu. End-to-end protection of iot communications through cryptographic enforcement of access control policies (Springer International Publishing, Cham, 2022), pp. 236\u2013255","DOI":"10.1007\/978-3-031-10684-2_14"},{"issue":"2","key":"194_CR12","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1109\/MCC.2016.28","volume":"3","author":"P Porambage","year":"2016","unstructured":"P. Porambage, M. Ylianttila, C. Schmitt, P. Kumar, A. Gurtov, A.V. Vasilakos, The quest for privacy in the internet of things. IEEE Cloud Comput. 3(2), 36\u201345 (2016). https:\/\/doi.org\/10.1109\/MCC.2016.28","journal-title":"IEEE Cloud Comput."},{"key":"194_CR13","doi-asserted-by":"publisher","unstructured":"G. Fedrecheski, J.M. Rabaey, L.C.P. Costa, P.C. Calcina Ccori, W.T. Pereira, M.K. Zuffo, in 2020 Global Internet of Things Summit (GIoTS). Self-sovereign identity for iot environments: A perspective (2020), pp. 1\u20136. https:\/\/doi.org\/10.1109\/GIOTS49054.2020.9119664","DOI":"10.1109\/GIOTS49054.2020.9119664"},{"key":"194_CR14","doi-asserted-by":"publisher","unstructured":"Y. Protskaya, L. Veltri, in 2019 10th International Conference on Networks of the Future (NoF). Broker bridging mechanism for providing anonymity in mqtt (2019), pp. 110\u2013113. https:\/\/doi.org\/10.1109\/NoF47743.2019.9015087","DOI":"10.1109\/NoF47743.2019.9015087"},{"issue":"17","key":"194_CR15","doi-asserted-by":"publisher","first-page":"15443","DOI":"10.1109\/JIOT.2023.3264019","volume":"10","author":"F Buccafurri","year":"2023","unstructured":"F. Buccafurri, V. de Angelis, S. Lazzaro, Mqtt-a: A broker-bridging p2p architecture to achieve anonymity in mqtt. IEEE Internet Things J. 10(17), 15443\u201315463 (2023). https:\/\/doi.org\/10.1109\/JIOT.2023.3264019","journal-title":"IEEE Internet Things J."},{"issue":"1","key":"194_CR16","doi-asserted-by":"publisher","first-page":"66","DOI":"10.1145\/290163.290168","volume":"1","author":"MK Reiter","year":"1998","unstructured":"M.K. Reiter, A.D. Rubin, Crowds: anonymity for web transactions. ACM Trans. Inf. Syst. Secur. 1(1), 66\u201392 (1998). https:\/\/doi.org\/10.1145\/290163.290168","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"194_CR17","doi-asserted-by":"publisher","unstructured":"F. Shirazi, M. Simeonovski, M.R. Asghar, M. Backes, C. Diaz, A survey on routing in anonymous communication protocols. ACM Comput. Surv. 51(3), (2018). https:\/\/doi.org\/10.1145\/3182658","DOI":"10.1145\/3182658"},{"key":"194_CR18","unstructured":"A.M. Piotrowska, J. Hayes, T. Elahi, S. Meiser, G. Danezis, in Proceedings of the 26th USENIX Conference on Security Symposium. The loopix anonymity system, SEC\u201917 (USENIX Association, USA, 2017), pp. 1199\u20131216"},{"key":"194_CR19","doi-asserted-by":"publisher","unstructured":"J. van den Hooff, D. Lazar, M. Zaharia, N. Zeldovich, in Proceedings of the 25th Symposium on Operating Systems Principles. Vuvuzela: scalable private messaging resistant to traffic analysis, SOSP \u201915 (Association for Computing Machinery, New York, 2015), pp. 137\u2013152. https:\/\/doi.org\/10.1145\/2815400.2815417","DOI":"10.1145\/2815400.2815417"},{"key":"194_CR20","doi-asserted-by":"publisher","unstructured":"N. Tyagi, Y. Gilad, D. Leung, M. Zaharia, N. Zeldovich, in Proceedings of the 26th Symposium on Operating Systems Principles. Stadium: A distributed metadata-private messaging system, SOSP \u201917 (Association for Computing Machinery, New York, 2017), pp. 423\u2013440. https:\/\/doi.org\/10.1145\/3132747.3132783","DOI":"10.1145\/3132747.3132783"},{"key":"194_CR21","unstructured":"G. Danezis, C. Diaz, A survey of anonymous communication channels. Technical Report MSR-TR-2008-35 (2008). https:\/\/www.microsoft.com\/en-us\/research\/publication\/a-survey-of-anonymous-communication-channels\/"},{"key":"194_CR22","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1016\/j.future.2018.06.040","volume":"89","author":"D Guha\u00a0Roy","year":"2018","unstructured":"D. Guha\u00a0Roy, B. Mahato, D. De, R. Buyya, Application-aware end-to-end delay and message loss estimation in internet of things (iot) - mqtt-sn protocols. Futur. Gener. Comput. Syst. 89, 300\u2013316 (2018). https:\/\/doi.org\/10.1016\/j.future.2018.06.040","journal-title":"Futur. Gener. Comput. Syst."},{"key":"194_CR23","doi-asserted-by":"publisher","unstructured":"U. Hunkeler, H.L. Truong, A. Stanford-Clark, in 2008 3rd International Conference on Communication Systems Software and Middleware and Workshops (COMSWARE \u201908). Mqtt-s - a publish\/subscribe protocol for wireless sensor networks (2008), pp. 791\u2013798. https:\/\/doi.org\/10.1109\/COMSWA.2008.4554519","DOI":"10.1109\/COMSWA.2008.4554519"},{"key":"194_CR24","doi-asserted-by":"publisher","unstructured":"M. Dahlmanns, J. Pennekamp, I.B. Fink, B. Schoolmann, K. Wehrle, M. Henze, in Proceedings of the 2021 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems. Transparent end-to-end security for publish\/subscribe communication in cyber-physical systems, SAT-CPS \u201921 (Association for Computing Machinery, New York, 2021), pp. 78\u201387. https:\/\/doi.org\/10.1145\/3445969.3450423","DOI":"10.1145\/3445969.3450423"},{"key":"194_CR25","doi-asserted-by":"publisher","unstructured":"T.C. Piller, D.M. Merz, A. Khelil, in 2022 IEEE 19th Annual Consumer Communications & Networking Conference (CCNC). Mqtt-4est: Rule-based web editor for semantic-aware topic naming in mqtt (2022), pp. 1\u20138. https:\/\/doi.org\/10.1109\/CCNC49033.2022.9700533","DOI":"10.1109\/CCNC49033.2022.9700533"},{"key":"194_CR26","unstructured":"A. Pfitzmann, M. Hansen. A terminology for talking about privacy by data minimization: Anonymity, unlinkability, undetectability, unobservability, pseudonymity, and identity management (Dresden, 2010)"},{"key":"194_CR27","doi-asserted-by":"publisher","unstructured":"M.J. Freedman, R. Morris, in Proceedings of the 9th ACM Conference on Computer and Communications Security. Tarzan: a peer-to-peer anonymizing network layer, CCS \u201902 (Association for Computing Machinery, New York, 2002), pp. 193\u2013206. https:\/\/doi.org\/10.1145\/586110.586137","DOI":"10.1145\/586110.586137"},{"issue":"4","key":"194_CR28","doi-asserted-by":"publisher","first-page":"3384","DOI":"10.1109\/JIOT.2022.3221857","volume":"10","author":"M Hamad","year":"2023","unstructured":"M. Hamad, A. Finkenzeller, H. Liu, J. Lauinger, V. Prevelakis, S. Steinhorst, SEEMQTT: Secure end-to-end mqtt-based communication for mobile iot systems using secret sharing and trust delegation. IEEE Internet Things J. 10(4), 3384\u20133406 (2023). https:\/\/doi.org\/10.1109\/JIOT.2022.3221857","journal-title":"IEEE Internet Things J."},{"key":"194_CR29","doi-asserted-by":"publisher","unstructured":"F. Buccafurri, V. De Angelis, S. Lazzaro, MQTT-I: Achieving end-to-end data flow integrity in mqtt. IEEE Trans. Dependable Secure Comput. 1\u201318 (2024). https:\/\/doi.org\/10.1109\/TDSC.2024.3358630","DOI":"10.1109\/TDSC.2024.3358630"},{"key":"194_CR30","doi-asserted-by":"crossref","unstructured":"I.B. Guirat, D. Gosain, C. Diaz, in Privacy Enhancing Technologies Symposium\u2013HotPETs Workshop. Mixim: A general purpose simulator for mixnet. (Walter de Gruyter, Berlin, 2020)","DOI":"10.1145\/3463676.3485613"},{"key":"194_CR31","doi-asserted-by":"publisher","unstructured":"J.Y. Yu, M. Rabbat, in 2013 5th IEEE International Workshop on Computational Advances in Multi-Sensor Adaptive Processing (CAMSAP). Performance comparison of randomized gossip, broadcast gossip and collection tree protocol for distributed averaging (2013), pp. 93\u201396. https:\/\/doi.org\/10.1109\/CAMSAP.2013.6714015","DOI":"10.1109\/CAMSAP.2013.6714015"},{"key":"194_CR32","doi-asserted-by":"publisher","first-page":"100221","DOI":"10.1016\/j.osnem.2022.100221","volume":"31","author":"F Buccafurri","year":"2022","unstructured":"F. Buccafurri, V. De Angelis, M.F. Idone, C. Labrini, A protocol for anonymous short communications in social networks and its application to proximity-based services. Online Soc. Netw. Media 31, 100221 (2022). https:\/\/doi.org\/10.1016\/j.osnem.2022.100221","journal-title":"Online Soc. Netw. Media"},{"key":"194_CR33","doi-asserted-by":"publisher","unstructured":"F. Buccafurri, V. De Angelis, M.F. Idone, C. Labrini, S. Lazzaro, Achieving sender anonymity in tor against the global passive adversary. Appl. Sci. 12(1), (2022). https:\/\/doi.org\/10.3390\/app12010137","DOI":"10.3390\/app12010137"},{"key":"194_CR34","doi-asserted-by":"crossref","unstructured":"R. Dingledine, N. Mathewson, P. Syverson, in Proceedings of the 13th Conference on USENIX Security Symposium - Volume 13. Tor: the second-generation onion router, SSYM\u201904 (USENIX Association, USA, 2004), p. 21","DOI":"10.21236\/ADA465464"},{"key":"194_CR35","first-page":"224","volume":"7","author":"BN Levine","year":"2006","unstructured":"B.N. Levine, C. Shields, N.B. Margolin, A survey of solutions to the sybil attack. Univ. Mass. Amherst MA 7, 224 (2006)","journal-title":"Univ. Mass. Amherst MA"},{"key":"194_CR36","doi-asserted-by":"publisher","unstructured":"D. Das, S. Meiser, E. Mohammadi, A. Kate, in 2018 IEEE Symposium on Security and Privacy (SP). Anonymity trilemma: Strong anonymity, low bandwidth overhead, low latency - choose two (IEEE Computer Society, Los Alamitos, 2018), pp. 108\u2013126. https:\/\/doi.org\/10.1109\/SP.2018.00011","DOI":"10.1109\/SP.2018.00011"},{"key":"194_CR37","doi-asserted-by":"publisher","unstructured":"L. von Ahn, A. Bortz, N.J. Hopper, in Proceedings of the 10th ACM Conference on Computer and Communications Security. k-anonymous message transmission, CCS \u201903 (Association for Computing Machinery, New York, 2003), pp. 122\u2013130. https:\/\/doi.org\/10.1145\/948109.948128","DOI":"10.1145\/948109.948128"},{"key":"194_CR38","doi-asserted-by":"publisher","unstructured":"C.C. Goh, E. Kanagaraj, L.M. Kamarudin, A. Zakaria, H. Nishizaki, X. Mao, in 2019 IEEE International Conference on Sensors and Nanotechnology. Iv-aqms: Http and mqtt protocol from a realistic testbed (2019), pp. 1\u20134. https:\/\/doi.org\/10.1109\/SENSORSNANO44414.2019.8940094","DOI":"10.1109\/SENSORSNANO44414.2019.8940094"},{"key":"194_CR39","doi-asserted-by":"publisher","unstructured":"H. Lee, J. Lim, T.T. Kwon, in 2019 International Conference on Information and Communication Technology Convergence (ICTC). Mqtls: Toward secure mqtt communication with an untrusted broker (2019), pp. 53\u201358. https:\/\/doi.org\/10.1109\/ICTC46691.2019.8940001","DOI":"10.1109\/ICTC46691.2019.8940001"},{"key":"194_CR40","doi-asserted-by":"publisher","unstructured":"O. Sadio, I. Ngom, C. Lishou, in 2019 Sixth International Conference on Internet of Things: Systems, Management and Security (IOTSMS). Lightweight security scheme for mqtt\/mqtt-sn protocol (2019), pp. 119\u2013123. https:\/\/doi.org\/10.1109\/IOTSMS48152.2019.8939177","DOI":"10.1109\/IOTSMS48152.2019.8939177"},{"key":"194_CR41","doi-asserted-by":"publisher","first-page":"226422","DOI":"10.1109\/ACCESS.2020.3045441","volume":"8","author":"CS Park","year":"2020","unstructured":"C.S. Park, H.M. Nam, Security architecture and protocols for secure mqtt-sn. IEEE Access 8, 226422\u2013226436 (2020). https:\/\/doi.org\/10.1109\/ACCESS.2020.3045441","journal-title":"IEEE Access"},{"key":"194_CR42","doi-asserted-by":"publisher","unstructured":"S. Pallickara, M. Pierce, H. Gadgil, G. Fox, Y. Yan, Y. Huang, in 2006 7th IEEE\/ACM International Conference on Grid Computing. A framework for secure end-to-end delivery of messages in publish\/subscribe systems (2006), pp. 215\u2013222. https:\/\/doi.org\/10.1109\/ICGRID.2006.311018","DOI":"10.1109\/ICGRID.2006.311018"}],"container-title":["EURASIP Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-025-00194-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13635-025-00194-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-025-00194-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T01:26:25Z","timestamp":1740533185000},"score":1,"resource":{"primary":{"URL":"https:\/\/jis-eurasipjournals.springeropen.com\/articles\/10.1186\/s13635-025-00194-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,26]]},"references-count":42,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["194"],"URL":"https:\/\/doi.org\/10.1186\/s13635-025-00194-7","relation":{},"ISSN":["2510-523X"],"issn-type":[{"value":"2510-523X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2,26]]},"assertion":[{"value":"28 June 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 February 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 February 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval and consent to participate"}},{"value":"All authors consent to the publication of this manuscript.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing interests.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"8"}}