Safeguarding smart cities: Understanding cybersecurity measures and protection against cybercrime

By Ilan Barda, CEO of Radiflow’s headshot.

Smart city systems have revolutionised the way societies operate by bringing about significant advantages, including real-time traffic management, energy conservation, and improved public safety. However, these advancements also leave our Cities vulnerable to a range of potential cyber threats, consequently jeopardising the well-being of the inhabitants. 

Smart city infrastructure occupies 68.2% of the total technology market, making them a prime target for cyberattacks. Atlanta was an example on the extreme end of the scale of a smart city that fell victim to a cyberattack  that left the enormous region in a hostage state with no access to courts and offices, and compromised personal data. To understand the scenario, we must explore what a smart city is. In essence, it’s a repository that collects vast volumes of data, in some instances, upwards of 2500 petabytes per day just from surveillance cameras! Think London, Dubai, and New York and you get the idea.

Consequences of successful cyberattacks can be dire and even lead to a full-blown shut down of the city. For example, the traffic systems comprising thousands upon thousands of  sensors and cameras could be rendered useless, resulting in severe injury and property damage. Therefore, the demand from smart cities for Cybersecurity is already enormous and on the rise – New York City alone invested over $60 million into cybersecurity protection just last year.

So, the question becomes: With all this money at stake, how exactly do cybersecurity companies protect smart city systems and data against cybercrime?

It started with IT/OT convergence 

A few years ago, information technologies (IT) and operational technologies (OT) in our cities operated independently, with negligible integration. For instance, public transport relied on static timetables, cash exchanges for paper tickets, and lacked amenities like onboard Wi-Fi. The IT systems were connected to the internet and accessed by employees and millions of citizens, but the OT side was off-limits. 

Today, IT/OT convergence has revolutionised public services, including transport, healthcare, traffic management, and utilities. These services now heavily rely on internet connectivity, making smart cities more susceptible to cyberattacks, just like their IT counterparts. With urban infrastructures increasingly digitised, hackers have a wide variety of new vulnerabilities and access points to exploit.

Another growing concern is the risk of data theft. As more personal data is collected from online activities and traditional surveillance systems, increasingly shared across the IT and OT realms, robust security measures must be extended so as to prevent unauthorised access and data confiscation.

Building a resilient cybersecurity framework for Smart Cities

Smart city systems without adequate security measures are vulnerable targets for opportunistic hackers. To protect smart cities from cyberattacks, a tailored and comprehensive security plan must be established, considering both immediate and long-term security requirements in light of budget limitations.

A robust network protection system should encompass security audits, regular updates, disaster recovery/business continuity planning, and industrial threat detection and monitoring systems. Combining these measures with an industrial risk assessment and management platform allows for early threat detection, interception, and effective mitigation strategies. Visualising vulnerabilities and prioritising hardening measures can significantly reduce risks in the operational technologies (OT) environment.

To prevent and limit the spread of attacks, a strong authentication process, efficient anomaly- detection systems, and network segmentation should be implemented as the frontline of defence. Additionally, smart cities need backup plans and strategies for system-patching without interrupting operation to ensure continuous uptime for critical applications.

To strengthen resilience against cyber threats, it is crucial for cities to allocate resources for training-and-awareness programs. By keeping personnel informed about potential risks and emerging threats, smart cities can bolster their overall cybersecurity posture.

The future of Smart  City protection

While smart city systems provide numerous benefits, the convergence of IT/OT increases their susceptibility to cybercrime. Strengthening these systems with a robust damage mitigation strategy that includes personalised security plans is essential. Safeguarding against threats such as malware, ransomware, and data theft is paramount. Incorporating anomaly-detection systems and comprehensive disaster-recovery procedures is necessary. 

To fully unlock the potential of smart cities, prioritising security is imperative!