Securing the smart city

Simon Moffatt, solutions director, ForgeRock

As the vision of smart cities increasingly becomes reality, so too does the issue of security surrounding them. What can be done to ensure the security practices put in place are up to the job?

No longer is the smart city concept a far-off, futuristic idea, it is a very real initiative that governments all over the world are embracing. However, as the internet of things (IoT) continues to spur the growth of smart cities, it also elevates the need to address the security concerns that come with them, says Simon Moffatt; solutions director, ForgeRock.

When the initial wave of IoT implementations began rolling out a few years ago, the core focus was understandably, on communication and connectivity. Giving ‘dumb’ objects such as televisions, lightbulbs and thermostats network connectivity was a huge technical achievement. So great were the rewards being reaped from these new connected ‘things’, that the identity, and access management aspect was often overlooked. As the maturity and stability of IoT communications increases, we now have gained a better understanding of the potential risks and vulnerabilities with respect to data loss.

The sheer volume of IoT devices provides a large attack vector for malicious operators. When considered on a citywide scale, where thousands of devices are communicating with both operators and each other simultaneously, the security implications are significant. Smart cities present the ideal target for hackers to create bot-net style networks of compromised devices, and use them to perform tasks other than those they were originally designed for.

For example, imagine if a hacker was able to compromise a city’s traffic flow system, turned all of the traffic lights around the city centre to red during rush hour. Team this with interference to local radio stations meaning there is no way for citizens to be warned. As commuters take their usual routes to work, unaware of the issues, the entire city could become gridlocked in minutes. Not only does this cost the city money from a productivity perspective, but it also means the emergency services cannot get to call-outs quickly, potentially costing lives.

How can threats be mitigated?

The first step to preventing threats of this nature is to understand where they are coming from. The best way to do this is to ensure that every connected device within the smart city infrastructure, be it a car, a street lamp or a earthquake sensor, has a validated identity and is correctly attached to the network. If a device can be identified, it is that much easier to confirm that the data it is generating is genuine and can be trusted. Importantly, it also means if the device is trying to do something that it is not permitted to do, it can be identified and prevented.

Focus on effective risk management

It is unrealistic to expect any network to be entirely free from malicious behaviour. Even with the best security measures in place, with so many attack vectors and threats out there, eventually something/somebody will get through. As such, effective risk management is a key component in evaluating and responding to threats in any smart city. Controls and, more importantly, recovery plans should also be put in place to not only reduce the risk window, but to also actively respond once any issue is discovered.

Public infrastructure will always be a highly attractive target for criminals and terrorists. As such, it is fundamentally important that the steps taken to secure smart cities will be effective at that scale. Any smart city security programme needs to be regularly reviewed, to ensure new innovations are incorporated, and compliance is always met. This, when teamed with identity management and a sound knowledge of threat vectors, should be enough to protect the ever-growing smart city.

The author of this blog is Simon Moffatt; solutions director, ForgeRock.

Comment on this article below or via Twitter: @M2MNow OR @jcm2m

RECENT ARTICLES

Enhance EV charging performance with cellular connectivity

Posted on: March 28, 2024

Electric vehicles (EVs) are steadily growing their market share at the expense of internal combustion engine vehicles. The growth is fuelled by several factors. Perhaps most importantly, prices for EVs have started to drop as competition in the industry is intensifying. New players and models are emerging, prompting several established EV makers to lower their

Read more

Panasonic and Jasmy unveil Web3 Platform for IoT data control

Posted on: March 28, 2024

Panasonic has joined forces with Jasmy (JASMY) blockchain to introduce a Web3 platform that will facilitate the connection of personal data on the Internet of Things (IoT). The collaboration between the Japanese-based blockchain and Panasonic Advanced Technology was initiated in February, but the official announcement was made on March 26.

Read more
FEATURED IoT STORIES

What is IoT? A Beginner’s Guide

Posted on: April 5, 2023

What is IoT? IoT, or the Internet of Things, refers to the connection of everyday objects, or “things,” to the internet, allowing them to collect, transmit, and share data. This interconnected network of devices transforms previously “dumb” objects, such as toasters or security cameras, into smart devices that can interact with each other and their

Read more

The IoT Adoption Boom – Everything You Need to Know

Posted on: September 28, 2022

In an age when we seem to go through technology boom after technology boom, it’s hard to imagine one sticking out. However, IoT adoption, or the Internet of Things adoption, is leading the charge to dominate the next decade’s discussion around business IT. Below, we’ll discuss the current boom, what’s driving it, where it’s going,

Read more

9 IoT applications that will change everything

Posted on: September 1, 2021

Whether you are a future-minded CEO, tech-driven CEO or IT leader, you’ve come across the term IoT before. It’s often used alongside superlatives regarding how it will revolutionize the way you work, play, and live. But is it just another buzzword, or is it the as-promised technological holy grail? The truth is that Internet of

Read more

Which IoT Platform 2021? IoT Now Enterprise Buyers’ Guide

Posted on: August 30, 2021

There are several different parts in a complete IoT solution, all of which must work together to get the result needed, write IoT Now Enterprise Buyers’ Guide – Which IoT Platform 2021? authors Robin Duke-Woolley, the CEO and Bill Ingle, a senior analyst, at Beecham Research. Figure 1 shows these parts and, although not all

Read more

CAT-M1 vs NB-IoT – examining the real differences

Posted on: June 21, 2021

As industry players look to provide the next generation of IoT connectivity, two different standards have emerged under release 13 of 3GPP – CAT-M1 and NB-IoT.

Read more

IoT and home automation: What does the future hold?

Posted on: June 10, 2020

Once a dream, home automation using iot is slowly but steadily becoming a part of daily lives around the world. In fact, it is believed that the global market for smart home automation will reach $40 billion by 2020.

Read more

5 challenges still facing the Internet of Things

Posted on: June 3, 2020

The Internet of Things (IoT) has quickly become a huge part of how people live, communicate and do business. All around the world, web-enabled devices are turning our world into a more switched-on place to live.

Read more