IoT Cybersecurity Virtual Laboratory Based on MQTT

Abstract

One of the challenges that the industrial cybersecurity is facing is the lack of trained workers. The MQTT protocol is being used extensively in both IoT and OT environments to send messages between different processes. The aim of this work is to provide the needed tools (virtual machines) and knowledge (practices) to teach the students progressively to understand how the MQTT protocol works, audit the security of its implementation and resolve the weaknesses found. The sessions are thought from a offensive & defensive point of view, making the learners adopt an attacker and defender mindset. Besides, a methodological approach has been taken to increase the difficulty of the topics related to with the protocol. For that, six practices have been designed with different scenarios to, first, learn about the protocol and then progressively improve the security level of the environment. While the first scenarios cover the analysis of the protocol and its basic security functions, in the last ones, a scenario where the IT and OT network zones are segmented, but conduits are not properly implemented can be found. This implementation permits lateral movements from IT to OT environments. That way, the students will see the danger posed by the presence of an exploitable vulnerability.