A Novel Security-by-Design Framework Based on the XMPP Protocol for Intelligent Communications in the Internet of Things

نویسندگان

1 Department of computer engineering, SR.C., Islamic Azad University, Tehran, Iran

2 Assistant Professor, Department of Computer Engineering, ST.C., Islamic Azad University, Tehran, Iran

3 Assistant Professor, Department of Computer Engineering, Amin University, Tehran, Iran

doi
10.71856/IMPCS.2025.1209110
چکیده

This article presents a lightweight and federated framework for securing intelligent communication in the Internet of Things (IoT) scope, based on the Extensible Messaging and Presence Protocol (XMPP) with a security-by-design approach. The core innovation lies in embedding security mechanisms within the message-oriented XMPP layer without requiring dedicated hardware, while maintaining full compatibility with resource-constrained devices. The proposed approach integrates TLS/SASL encryption, a dynamic trust management layer, with real-time updates, and capability-based access control. Three threat scenarios message injection, identity spoofing, and DoS attacks have been simulated in the Python environment. Results present that the system achieves 98% privacy preservation, 96% authentication success rate, 87% fault tolerance, an average power consumption of 83 Mw, and a handshake delay of 44 Ms demonstrating significant improvement over baseline methods. These metrics reflect a well-balanced trade-off between security and performance in heterogeneous IoT networks, indicating that the XMPP-SBD framework is a practical solution for scalable and secure IoT deployment.