Smart cities’ are harnessing the Internet of Things (IoT) to make more intelligent, efficient, and sustainable transport and other services. However, digital security investments in smart cities are severely lagging thus seeding the future vulnerabilities of the IoT ecosystem, it is claimed.
The Financial, Information and Communication Technologies (ICT), and defence industries will account for more than half, 56pc of the US$135 billion projected total cyber security spend in critical infrastructure in 2024, finds the market advisory firm ABI Research. The remaining 44pc of the 2024 spend will be split between the energy, healthcare, public security, transport and ‘water and waste’ sectors – leaving them woefully underfunded and incredibly vulnerable to cyberattacks, according to the research report.
Smart cities are comprised of a complex, interdependent network of devices, systems, platforms, and users. Smart energy, utilities, water and wastage, parking and automotive, industrial and manufacturing, building automation, e-government and telemedicine, surveillance and public safety are some of the verticals to secure.
Dimitrios Pavlakis, Industry Analyst at ABI Research says: “Smart cities are increasingly under attack by a variety of threats. These include sophisticated cyberattacks on critical infrastructure, bringing industrial control systems (ICS) to a grinding halt, abusing low-power wide area networks (LPWAN) and device communication hijacking, system lockdown threats caused by ransomware, manipulation of sensor data to cause widespread panic (e.g., disaster detection systems) and siphoning citizen, healthcare, consumer data, and personally identifiable information (PII), among many others. In this increasingly connected technological landscape, every smart city service is as secure as its weakest link.”
Cloud service powerhouses like Microsoft, security firms Datacard and Rambus, cellular communication companies like Sierra Wireless, certification authorities like Globalsign, and multi-vertical service providers like Huawei are some of the vendors providing smart city specific solutions. According to ABI there will be about 1.3 billion wide-area network smart city connections by 2024. Almost half of those connections are expected to be LPWA-LTE and LPWA Proprietary. Some LPWA protocols like the NB-IoT are attempting to tackle at least some digital and communication security challenges. However, the fact of the matter remains that these intrinsically lightweight cellular versions aim toward lowering bandwidth cost, increasing coverage, and lowering latency and are not, in general, capable of handling the increased number of cyber-threats in the interconnected smart city environment.
Pavlakis adds: “Lack of cryptographic measures, poor encryption key management, non-existent secure device onboarding services, weaponized machine learning technologies by cyber-attackers, poor understanding of social engineering, and lack of protection versus Distributed Denial of Service (DDoS) attacks are just are some of the key issues contributing to the amplification of cyber-threats in smart city ecosystems. This is further exacerbated by the lack of digital security investments and will, unfortunately, jeopardise the key elements of intelligence, efficiency, and sustainability of future smart city deployments.”
These findings are from ABI Research’s Smart City Cybersecurity application analysis report.
---
Quelle/Source: Professional Security, 20.08.2019
Bitte besuchen Sie/Please visit:
