{"id":"https://openalex.org/W7125674780","doi":"https://doi.org/10.1186/s13635-026-00224-y","title":"A comparative security analysis of MQTT brokers against DoS attacks","display_name":"A comparative security analysis of MQTT brokers against DoS attacks","publication_year":2026,"publication_date":"2026-01-26","ids":{"openalex":"https://openalex.org/W7125674780","doi":"https://doi.org/10.1186/s13635-026-00224-y"},"language":"en","primary_location":{"id":"doi:10.1186/s13635-026-00224-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-026-00224-y","pdf_url":null,"source":{"id":"https://openalex.org/S5407056161","display_name":"Journal on Information Security","issn_l":"3091-4515","issn":["3091-4515"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal on Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1186/s13635-026-00224-y","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119435744","display_name":"Phuc-Hung Pham Le","orcid":null},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Phuc-Hung Pham\u00a0Le","raw_affiliation_strings":["FPT School of Business and Technology, FPT University, Danang, 550000, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FPT School of Business and Technology, FPT University, Danang, 550000, Vietnam","institution_ids":["https://openalex.org/I109689652"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123837741","display_name":"Quy Ngoc Do","orcid":null},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Quy Ngoc Do","raw_affiliation_strings":["FPT School of Business and Technology, FPT University, Danang, 550000, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FPT School of Business and Technology, FPT University, Danang, 550000, Vietnam","institution_ids":["https://openalex.org/I109689652"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119435745","display_name":"Toan Q. Dinh","orcid":null},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Toan Q. Dinh","raw_affiliation_strings":["FPT School of Business and Technology, FPT University, Danang, 550000, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FPT School of Business and Technology, FPT University, Danang, 550000, Vietnam","institution_ids":["https://openalex.org/I109689652"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046991238","display_name":"Ho-Trong-Nguyen Pham","orcid":null},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Ho-Trong-Nguyen Pham","raw_affiliation_strings":["Department of Information Assurance, FPT University, Danang, 550000, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Assurance, FPT University, Danang, 550000, Vietnam","institution_ids":["https://openalex.org/I109689652"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016461160","display_name":"Luong Vuong Nguyen","orcid":"https://orcid.org/0000-0002-4680-1984"},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]}],"countries":["VN"],"is_corresponding":true,"raw_author_name":"Luong Vuong Nguyen","raw_affiliation_strings":["Department of Artificial Intelligence, FPT University, Danang, 550000, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence, FPT University, Danang, 550000, Vietnam","institution_ids":["https://openalex.org/I109689652"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5016461160"],"corresponding_institution_ids":["https://openalex.org/I109689652"],"apc_list":null,"apc_paid":null,"fwci":37.7743,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.99408883,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"2026","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.6421999931335449,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.6421999931335449,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.060100000351667404,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.05990000069141388,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/mqtt","display_name":"MQTT","score":0.9711999893188477},{"id":"https://openalex.org/keywords/packet-loss","display_name":"Packet loss","score":0.6219000220298767},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5634999871253967},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5264999866485596},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.5253999829292297},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4765999913215637},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4756999909877777},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4722000062465668}],"concepts":[{"id":"https://openalex.org/C132868160","wikidata":"https://www.wikidata.org/wiki/Q10322548","display_name":"MQTT","level":3,"score":0.9711999893188477},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7797999978065491},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7035999894142151},{"id":"https://openalex.org/C54108766","wikidata":"https://www.wikidata.org/wiki/Q391064","display_name":"Packet loss","level":3,"score":0.6219000220298767},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5634999871253967},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5264999866485596},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.5253999829292297},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4765999913215637},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4756999909877777},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4733000099658966},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4722000062465668},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.43939998745918274},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4293000102043152},{"id":"https://openalex.org/C46637626","wikidata":"https://www.wikidata.org/wiki/Q6693015","display_name":"Low latency (capital markets)","level":2,"score":0.3384000062942505},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C169485995","wikidata":"https://www.wikidata.org/wiki/Q42283","display_name":"File Transfer Protocol","level":3,"score":0.3174000084400177},{"id":"https://openalex.org/C41458344","wikidata":"https://www.wikidata.org/wiki/Q732577","display_name":"Publication","level":2,"score":0.3158999979496002},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C26324664","wikidata":"https://www.wikidata.org/wiki/Q1065525","display_name":"Message queue","level":2,"score":0.25529998540878296}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1186/s13635-026-00224-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-026-00224-y","pdf_url":null,"source":{"id":"https://openalex.org/S5407056161","display_name":"Journal on Information Security","issn_l":"3091-4515","issn":["3091-4515"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal on Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1186/s13635-026-00224-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-026-00224-y","pdf_url":null,"source":{"id":"https://openalex.org/S5407056161","display_name":"Journal on Information Security","issn_l":"3091-4515","issn":["3091-4515"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal on Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2052938009","https://openalex.org/W2586432806","https://openalex.org/W2733765803","https://openalex.org/W2767039516","https://openalex.org/W2787083373","https://openalex.org/W2927160209","https://openalex.org/W2929305171","https://openalex.org/W2980056590","https://openalex.org/W3086157999","https://openalex.org/W3098620325","https://openalex.org/W3128289297","https://openalex.org/W3136078224","https://openalex.org/W3137456931","https://openalex.org/W3184493268","https://openalex.org/W3194569620","https://openalex.org/W3200178288","https://openalex.org/W4213135054","https://openalex.org/W4294527283","https://openalex.org/W4313524917","https://openalex.org/W4377024351","https://openalex.org/W4385549122","https://openalex.org/W4394835058","https://openalex.org/W4396554310","https://openalex.org/W4399485385","https://openalex.org/W4401516970","https://openalex.org/W4402995135","https://openalex.org/W4403211895","https://openalex.org/W4404691167","https://openalex.org/W4406521756"],"related_works":[],"abstract_inverted_index":{"The":[0,102],"growing":[1],"use":[2],"of":[3,5,23,107,177],"Internet":[4],"Things":[6],"(IoT)":[7],"devices":[8],"has":[9],"increased":[10],"the":[11,24,63,76,110,145,156,160,175],"need":[12],"for":[13,171],"secure":[14],"and":[15,53,83,99,121,134,149,185],"reliable":[16],"communication":[17],"protocols,":[18],"with":[19,144,190],"MQTT":[20,29,49,64,169],"being":[21],"one":[22],"most":[25,157],"widely":[26],"used.":[27],"However,":[28],"brokers":[30,77,170],"are":[31],"vulnerable":[32],"to":[33,55,80,136],"denial-of-service":[34],"(DoS)":[35],"attacks,":[36,61,82],"which":[37],"can":[38],"disrupt":[39],"data":[40],"flow":[41],"in":[42],"IoT":[43,74,172],"systems.":[44],"This":[45],"research":[46],"compares":[47],"three":[48],"brokers,":[50],"Mosquitto,":[51],"HiveMQ,":[52],"EMQX,":[54],"evaluate":[56],"their":[57,84],"resilience":[58,108],"against":[59],"DoS":[60,192],"specifically":[62],"publish":[65],"flooding":[66],"attack.":[67],"Using":[68],"a":[69,150],"testing":[70],"environment":[71],"replicating":[72],"real-world":[73],"scenarios,":[75],"were":[78],"subjected":[79],"simulated":[81],"performance":[85,143],"was":[86],"measured":[87],"based":[88],"on":[89],"five":[90],"key":[91],"metrics:":[92],"latency,":[93,182],"packet":[94,123,132,147],"loss,":[95],"throughput,":[96],"CPU":[97],"usage,":[98],"recovery":[100,115,152,186],"time.":[101],"results":[103],"show":[104],"varying":[105],"levels":[106],"among":[109,159],"brokers.":[111],"Mosquitto":[112],"demonstrated":[113],"quick":[114],"but":[116,129],"suffered":[117],"from":[118],"high":[119,131],"latency":[120,128],"moderate":[122],"loss.":[124],"HiveMQ":[125],"maintained":[126],"low":[127],"experienced":[130],"loss":[133,148],"failed":[135],"recover":[137],"without":[138],"manual":[139],"intervention.":[140],"EMQX":[141],"balanced":[142],"lowest":[146],"reasonable":[151],"time,":[153],"making":[154],"it":[155],"robust":[158],"three.":[161],"These":[162],"findings":[163],"provide":[164],"insights":[165],"into":[166],"selecting":[167],"suitable":[168],"deployments,":[173],"emphasizing":[174],"importance":[176],"considering":[178],"factors":[179],"such":[180],"as":[181],"message":[183],"reliability,":[184],"capability":[187],"when":[188],"dealing":[189],"potential":[191],"attacks.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-06-07T08:38:57.713557","created_date":"2026-01-27T00:00:00"}