Secure Data Transmission and Protection Against Man-in-the-Middle Attacks
Download PDFAbstract
The rapid proliferation of Internet of Things (IoT) devices has fundamentally transformed the digital landscape, enabling unprecedented connectivity and automation. However, this expansion has also introduced significant security vulnerabilities, primarily due to the resource-constrained nature of many IoT devices. Among the most critical threats is the Man-in-the-Middle (MITM) attack, where malicious actors intercept, alter, or inject data into communication channels between devices and servers. This chapter explores the intricate mechanisms of MITM attacks within IoT ecosystems and proposes robust, scalable methodologies for secure data transmission. By evaluating and comparing cryptographic protocols such as Transport Layer Security (TLS) and Datagram Trans port Layer Security (DTLS) across common IoT communication standards like Message Queuing Telemetry Transport (MQTT) and Constrained Application Protocol (CoAP), we provide a comprehensive framework for mitigating interception risks. The proposed methodology integrates end-to-end encryption with robust certificate-based authentica tion. Extensive simulation results demonstrate the efficacy of the proposed architecture in detecting and preventing MITM attacks while maintaining acceptable network perfor mance metrics, including latency, throughput, and packet loss.
References
- Hamidreza Fereidouni, Olga Fadeitcheva, and Mehdi Zalai. “IoT and man-in-the middle attacks”. In: Security and Privacy 8.2 (2025), e70016.
- Hamidreza Fereidouni, Olga Fadeitcheva, and Mehdi Zalai. “IoT and man-in-the middle attacks”. In: Security and Privacy 8.2 (2025), e70016.
- Pankaj Mudholkar and Dr Ashwin Dobariya. “Man-in-the-Middle Attacks on IoT Devices: Prevention Techniques”. In: Available at SSRN 5117885 (2023).
- Ankita RChordiya, Subhrajit Majumder, and Ahmad YJavaid. “Man-in-the-middle (mitm) attack based hijacking of http traffic using open source tools”. In: 2018 IEEE International Conference on Electro/Information Technology (EIT). IEEE. 2018, pp. 0438–0443.
- Danish Bilal Ansari, Atteeq-Ur Rehman, and Rizwan Ali. “Internet of things (iot) protocols: a brief exploration of mqtt and coap”. In: International Journal of Com puter Applications 179.27 (2018), pp. 9–14.
- Thomas Fossati. RFC 7925: Transport Layer Security (TLS)/Datagram Transport Layer Security (DTLS) profiles for the Internet of Things. 2016.
- Malti Bansal and Priya. “Performance comparison of MQTT and CoAP protocols in different simulation environments”. In: Inventive Communication and Computa tional Technologies: Proceedings of ICICCT 2020 (2020), pp. 549–560.
- Venkat Nutalapati. “Implementing End-to-End Encryption in Mobile Applications: Challenges and Solutions”. In: International Research Journal of Engineering & Applied Sciences (IRJEAS) 9.2 (2021), pp. 29–33.
- S Karthikeyan, Rizwan Patan, and B Balamurugan. “Enhancement of security in the Internet of Things (IoT) by using X. 509 authentication mechanism”. In: Recent Trends in Communication, Computing, and Electronics: Select Proceedings of IC3E 2018. Springer, 2018, pp. 217–225.
SECURE AND SCALABLE INTERNET OF THINGS
