{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T20:08:34Z","timestamp":1780776514699,"version":"3.54.1"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,1,26]],"date-time":"2026-01-26T00:00:00Z","timestamp":1769385600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2026,3,16]],"date-time":"2026-03-16T00:00:00Z","timestamp":1773619200000},"content-version":"vor","delay-in-days":49,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J. Inf. Secur."],"DOI":"10.1186\/s13635-026-00224-y","type":"journal-article","created":{"date-parts":[[2026,1,26]],"date-time":"2026-01-26T10:16:16Z","timestamp":1769422576000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["A comparative security analysis of MQTT brokers against DoS attacks"],"prefix":"10.1186","volume":"2026","author":[{"given":"Phuc-Hung","family":"Pham\u00a0Le","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Quy Ngoc","family":"Do","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Toan Q.","family":"Dinh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ho-Trong-Nguyen","family":"Pham","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Luong Vuong","family":"Nguyen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,1,26]]},"reference":[{"key":"224_CR1","doi-asserted-by":"publisher","DOI":"10.1016\/j.array.2023.100316","author":"M Al-Fayoumi","year":"2023","unstructured":"M. Al-Fayoumi, Q.A. Al-Haija, Capturing low-rate DDos attack based on MQTT protocol in software definedIot environment. Array (2023). https:\/\/doi.org\/10.1016\/j.array.2023.100316","journal-title":"Array"},{"key":"224_CR2","doi-asserted-by":"publisher","DOI":"10.3390\/s20226578","author":"I Vaccari","year":"2020","unstructured":"I. Vaccari, G. Chiola, M. Aiello, M. Mongelli, E. Cambiaso, MQTTset, a new dataset for machine learning techniques on MQTT. Sensors (2020). https:\/\/doi.org\/10.3390\/s20226578","journal-title":"Sensors"},{"key":"224_CR3","doi-asserted-by":"publisher","unstructured":"A. Alatram, L.F. Sikos, M. Johnston, P. Szewczyk, J.J. Kang, DoS\/DDoS-MQTT-IoT: A dataset for evaluating intrusions in IoT networks using the MQTT protocol. Comput. Netw. 231 (2023). https:\/\/doi.org\/10.1016\/j.comnet.2023.109809","DOI":"10.1016\/j.comnet.2023.109809"},{"key":"224_CR4","unstructured":"A. Banks, R. Gupta, MQTT Version 3.1.1. https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v3.1.1\/mqtt-v3.1.1.html (2014). [Online]. Accessed 3 Sep 2024"},{"key":"224_CR5","unstructured":"M. Antonakakis, T. April, M. Bailey, M. Bernhard, E. Bursztein, J. Cochran, Z. Durumeric, J.A. Halderman, L.Invernizzi, M. Kallitsis, D. Kumar, C. Lever, Z. Ma, J. Mason, D. Menscher, C. Seaman, N. Sullivan, K. Thomas, Y. Zhou,in Proceedings of the 26th USENIX Security Symposium. Understanding the Mirai Botnet.\u00a0(USENIX Association,\u00a0CA, United States, 1973), p. 1093\u20131110"},{"issue":"1","key":"224_CR6","doi-asserted-by":"crossref","first-page":"209","DOI":"10.17148\/IARJSET.2022.9141","volume":"9","author":"AP Singh","year":"2022","unstructured":"A.P. Singh, A. Kumar, A study on MQTT protocol and its cyber attacks. Int. Adv. Res. J. Sci. Eng. Technol. 9(1), 209\u2013213 (2022)","journal-title":"Int. Adv. Res. J. Sci. Eng. Technol."},{"key":"224_CR7","doi-asserted-by":"crossref","unstructured":"I. ul Sami, M.B. Ahmad, M. Asif, R. Ullah, Dos\/ddos detection for e-healthcare in internet of things. Int. J. Adv.Comput. Sci. Appl. 9(1),\u00a0297\u2013300\u00a0(2018)","DOI":"10.14569\/IJACSA.2018.090140"},{"issue":"4","key":"224_CR8","doi-asserted-by":"publisher","first-page":"381","DOI":"10.3390\/electronics10040381","volume":"10","author":"T Horak","year":"2021","unstructured":"T. Horak, P. Strelec, L. Huraj, P. Tanuska, A. Vaclavova, M. Kebisek, The vulnerability of the production line using industrial iot systems under ddos attack. Electronics 10(4), 381 (2021)","journal-title":"Electronics"},{"key":"224_CR9","doi-asserted-by":"publisher","unstructured":"U. Morelli, I. Vaccari, S. Ranise, E. Cambiaso, in Proceedings of the 16th International Conference on Availability, Reliability and Security. DoS Attacks in Available MQTT Implementations: Investigating the Impact on Brokers and Devices, and supported Anti-DoS Protections (Association for Computing Machinery, New York, 2021), ARES \u201921. https:\/\/doi.org\/10.1145\/3465481.3470049","DOI":"10.1145\/3465481.3470049"},{"key":"224_CR10","doi-asserted-by":"crossref","unstructured":"S. Kaganurmath, N.G. Cholli, in 2024 3rd International Conference on Automation, Computing and Renewable Systems (ICACRS). Secure communication in resource-constrained iot environments using mqtt protocol: A review (IEEE,\u00a0Piscataway, 2024), pp. 615\u2013622","DOI":"10.1109\/ICACRS62842.2024.10841503"},{"key":"224_CR11","unstructured":"S. Tian, A novel lightweight mqtt security scheme for the internet of medical things. Ph.D. thesis, University of York (2023)"},{"key":"224_CR12","doi-asserted-by":"publisher","first-page":"126","DOI":"10.52783\/jes.758","volume":"20","author":"R Mahajan","year":"2024","unstructured":"R. Mahajan, R. Mahajan, M. Tatiya, U. Mandekar, M. Shahakar, Y. Patil, Enhancing mqtt security in the internet of things with an enhanced symmetric algorithm. J. Electr. Syst. 20, 126\u2013137 (2024)","journal-title":"J. Electr. Syst."},{"key":"224_CR13","doi-asserted-by":"publisher","unstructured":"J. Kotak, A. Shah, A. Shah, P. Rajdev, A Comparative Analysis on Security of MQTT Brokers. IET Conf. Proc. (2019). https:\/\/doi.org\/10.1049\/cp.2019.0180","DOI":"10.1049\/cp.2019.0180"},{"key":"224_CR14","doi-asserted-by":"crossref","unstructured":"S. Gupta, T. Sacchetti, B. Crispo, in 2022 4th IEEE Middle East and North Africa COMMunications Conference (MENACOMM). End-to-end encryption for securing communications in industry 4.0 (IEEE,\u00a0Piscataway, 2022), pp. 153\u2013158","DOI":"10.1109\/MENACOMM57252.2022.9998272"},{"key":"224_CR15","doi-asserted-by":"crossref","unstructured":"N. Naik, in 2017 IEEE international systems engineering symposium (ISSE). Choice of Eff ective Messaging Protocols for IoT Systems: MQTT, CoAP, AMQP and HTTP. (IEEE,\u00a0Piscataway, 2017), pp. 1\u20137","DOI":"10.1109\/SysEng.2017.8088251"},{"issue":"10","key":"224_CR16","doi-asserted-by":"publisher","DOI":"10.3390\/sym16101282","volume":"16","author":"X Gong","year":"2024","unstructured":"X. Gong, T. Kou, Y. Li, Enhancing mqtt-sn security with a lightweight puf-based authentication and encrypted channel establishment scheme. Symmetry 16(10), 1282 (2024)","journal-title":"Symmetry"},{"key":"224_CR17","unstructured":"OASIS team. MQTT Version 5.0. https:\/\/docs.oasis-open.org\/mqtt\/mqtt\/v5.0\/mqtt-v5.0.html (2019). [Online]. Accessed 3 Sep 2024"},{"key":"224_CR18","doi-asserted-by":"crossref","unstructured":"A. Jandoubi, M.T. Bennani, O. Mosbahi, A. El Fazziki, in ENASE. Analyzing mqtt attack scenarios: A systematicformalization and tlc model checker simulation (SCITEPRESS - Science and Technology Publications,\u00a0Setubal, 2024), pp. 370\u2013378","DOI":"10.5220\/0012625600003687"},{"key":"224_CR19","doi-asserted-by":"publisher","first-page":"139273","DOI":"10.1109\/ACCESS.2024.3412030","volume":"12","author":"SUA Laghari","year":"2024","unstructured":"S.U.A. Laghari, W. Li, S. Manickam, P. Nanda, A.K. Al-Ani, S. Karuppayah, Securing mqtt ecosystem: exploring vulnerabilities, mitigations, and future trajectories. IEEE Access 12, 139273\u2013139289 (2024)","journal-title":"IEEE Access"},{"issue":"2","key":"224_CR20","first-page":"3177","volume":"45","author":"J Kaur","year":"2024","unstructured":"J. Kaur, J. Singh, S. Sood, Enhancing security in MQTT-based iot networks: a review of ML-based detection methods and future directions. J. Propuls. Technol. 45(2), 3177\u20133203 (2024)","journal-title":"J. Propuls. Technol."},{"key":"224_CR21","doi-asserted-by":"crossref","unstructured":"M.N. Dhaval, A.G. Raiyani, Detecting and Preventing DoS Attacks Within IoT Environment Using AWS IoT Core.International Conference on Pervasive Knowledge and Collective Intelligence on Web and Social Media (Springer Cham,\u00a0Switzerland, 2023), pp.75\u201388","DOI":"10.1007\/978-3-031-66044-3_5"},{"issue":"2","key":"224_CR22","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1109\/MC.2017.62","volume":"50","author":"E Bertino","year":"2017","unstructured":"E. Bertino, N. Islam, Botnets and internet of things security. Computer 50(2), 76\u201379 (2017)","journal-title":"Computer"},{"key":"224_CR23","doi-asserted-by":"crossref","unstructured":"O. Alrawi, C. Lever, M. Antonakakis, F. Monrose, in 2019 IEEE symposium on security and privacy (sp). SoK: Security Evaluation of Home-Based IoT Deployments (2019), pp. 1362\u20131380","DOI":"10.1109\/SP.2019.00013"},{"issue":"8","key":"224_CR24","doi-asserted-by":"publisher","first-page":"2710","DOI":"10.1016\/j.adhoc.2013.05.003","volume":"11","author":"T Kothmayr","year":"2013","unstructured":"T. Kothmayr, C. Schmitt, W. Hu, M. Brunig, G. Carle, DTLS based security and two-way authentication for the Internet of Things. Ad Hoc Networks 11(8), 2710\u20132723 (2013). https:\/\/doi.org\/10.1016\/j.adhoc.2013.05.003","journal-title":"Ad Hoc Networks"},{"key":"224_CR25","unstructured":"EMQX team. Security Guide. https:\/\/docs.emqx.com\/en\/emqx\/latest\/access-control\/security-guide.html (2023). [Online]. Accessed 3 Sep 2024"},{"key":"224_CR26","doi-asserted-by":"crossref","unstructured":"M. Bender, E. Kirdan, M.O. Pahl, G. Carle, in 2021 IEEE 18th Annual Consumer Communications & Networking Conference (CCNC). Open-source mqtt evaluation (IEEE,\u00a0Piscataway, 2021), pp. 1\u20134","DOI":"10.1109\/CCNC49032.2021.9369499"},{"key":"224_CR27","doi-asserted-by":"publisher","DOI":"10.3390\/en14185817","author":"B Mishra","year":"2021","unstructured":"B. Mishra, B. Mishra, A. Kertesz, Stress-testing MQTT brokers: a comparative analysis of performance measurements. Energies (2021). https:\/\/doi.org\/10.3390\/en14185817","journal-title":"Energies"},{"key":"224_CR28","doi-asserted-by":"publisher","unstructured":"H. Koziolek, S. Gruner, J. Ruckert, in The 14th European Conference on Software Architecture (ECSA) Proceedings. A Comparison of MQTT Brokers for Distributed IoT Edge Computing (2020), pp. 352\u2013368. https:\/\/doi.org\/10.1007\/978-3-030-58923-3_23","DOI":"10.1007\/978-3-030-58923-3_23"},{"key":"224_CR29","doi-asserted-by":"crossref","unstructured":"J. Dizdarevi\u0107, M. Michalke, A. Jukan, X. Masip-Bruin, F. D\u2019Andria, in 2024 IEEE 24th International Symposium on Cluster, Cloud and Internet Computing (CCGrid). Benchmarking performance of various mqtt broker implementations in a compute continuum (IEEE,\u00a0Piscataway, 2024), pp. 357\u2013366","DOI":"10.1109\/CCGrid59990.2024.00048"},{"key":"224_CR30","doi-asserted-by":"crossref","unstructured":"R. Banno, K. Ohsawa, Y. Kitagawa, T. Takada, T. Yoshizawa, in 2021 IEEE 18th Annual Consumer Communications & Networking Conference (CCNC). Measuring performance of mqtt v5. 0 brokers with mqttloader (IEEE,\u00a0Piscataway, 2021), pp. 1\u20132","DOI":"10.1109\/CCNC49032.2021.9369467"},{"key":"224_CR31","doi-asserted-by":"crossref","unstructured":"F. Pazos, Performance evaluation of mqtt broker servers deployed in the cloud. Electron. J. SADIO 23,\u00a0117\u2013132\u00a0(2024)","DOI":"10.24215\/15146774e043"},{"issue":"7","key":"224_CR32","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1109\/MC.2017.201","volume":"50","author":"C Kolias","year":"2017","unstructured":"C. Kolias, G. Kambourakis, A. Stavrou, J. Voas, Ddos in the iot: Mirai and other botnets. Computer 50(7), 80\u201384 (2017)","journal-title":"Computer"},{"key":"224_CR33","unstructured":"F. Wang. Comparison of Open Source MQTT Brokers 2024. https:\/\/www.emqx.com\/en\/blog\/a-comprehensive-comparison-of-open-source-mqtt-brokers-in-2023 (2024). [Online]. Accessed 3 Sep 2024"},{"key":"224_CR34","unstructured":"Mosquitto team. Version 2.0.18 Released. https:\/\/mosquitto.org\/blog\/2023\/09\/version-2-0-18-released\/ (2023). [Online]. Accessed 3 Sep 2024"},{"key":"224_CR35","unstructured":"HiveMQ team. HiveMQ Introduction. https:\/\/docs.hivemq.com\/hivemq\/latest\/user-guide\/index.html (2019). [Online]. Accessed 3 Sep 2024"},{"key":"224_CR36","doi-asserted-by":"publisher","DOI":"10.3390\/s21144932","author":"H Yar","year":"2021","unstructured":"H. Yar, A.S. Imran, Z.A. Khan, M. Sajjad, Z. Kastrati, Towards smart home automation using IoT-enabled edge-computing paradigm. Sensors (2021). https:\/\/doi.org\/10.3390\/s21144932","journal-title":"Sensors"},{"key":"224_CR37","unstructured":"D. Merkel, Docker: Lightweight Linux Containers for Consistent Development and Deployment. Linux J. 239(2),\u00a076\u201391 (2014)"},{"key":"224_CR38","unstructured":"M. Priya. Understanding MQTT Protocol : IoT Part 14. https:\/\/www.engineersgarage.com\/understanding-mqtt-protocol-iot-part-14\/ (2024). [Online]. Accessed 3 Sep 2024"},{"issue":"6","key":"224_CR39","doi-asserted-by":"publisher","first-page":"1263","DOI":"10.1007\/s10207-022-00611-9","volume":"21","author":"C Prajisha","year":"2022","unstructured":"C. Prajisha, A. Vasudevan, An efficient intrusion detection system for MQTT-IoT using enhanced chaotic salp swarm algorithm and LightGBM. Int. J. Inf. Secur. 21(6), 1263\u20131282 (2022). https:\/\/doi.org\/10.1007\/s10207-022-00611-9","journal-title":"Int. J. Inf. Secur."},{"key":"224_CR40","doi-asserted-by":"publisher","unstructured":"A. Haripriya, K. Kulothungan, Secure-MQTT: an Efficient Fuzzy Logic-based Approach to Detect DoS Attack in MQTT Protocol for Internet of Things. EURASIP J. Wirel. Commun. Network. 2019(1) (2019). https:\/\/doi.org\/10.1186\/s13638-019-1402-8","DOI":"10.1186\/s13638-019-1402-8"},{"key":"224_CR41","volume-title":"The art of Computer Systems Performance Analysis","author":"R Jain","year":"1990","unstructured":"R. Jain, The art of Computer Systems Performance Analysis (Wiley, New York, 1990)"}],"container-title":["Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13635-026-00224-y","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-026-00224-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-026-00224-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,16]],"date-time":"2026-03-16T11:22:23Z","timestamp":1773660143000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1186\/s13635-026-00224-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,26]]},"references-count":41,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["224"],"URL":"https:\/\/doi.org\/10.1186\/s13635-026-00224-y","relation":{},"ISSN":["3091-4515"],"issn-type":[{"value":"3091-4515","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,26]]},"assertion":[{"value":"7 August 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 January 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 January 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Not applicable.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}},{"value":"The authors declare that they have no competing interests.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"5"}}