VAR Panchayat

Securing Smart Cities and IoT Devices

by VARINDIA 2017-04-03

Integration of different services necessitates that civic bodies should have a matured and collaborative environment to enable such integration

The popularity of Internet has made organizations to go global and over the years that information access through the Internet has become an integral part of almost all the businesses and city life. Tele-working (or work-from-home) option has integrated home networks with office. The power and proliferation of Smart Phones has brought next level of integration. To keep pace with this even civic bodies are expected to integrate their services and that integrated platform is termed as Smart Cities.

Smart City platform with IoTcombines unique monitoring devices and domain algorithms to enable monitoring as well as real time controls. This level of integration has potential to enhance existing services, provide cross service work flow integration and even altogether new services not being offered today. For example municipalities and local councils, waste management is an area targeted for improvement. With new technologies and the Internet of Things (IoT), cities have new ways to optimize waste management processes, while reducing costs and delivering better services to citizens. Another example could be; real time analysis of traffic patterns to optimize signalling and routing, and improve the quality of life in metro cities. Further combining this with Automatic Number Plate Recognition (ANPR) system and allied analytics engine can deliver actionable intelligence to police. Many such solutions are successfully implemented across the globe.

By now, we all know that there is no gain without an associated pain. Enabling such solutions and services demands integration of many systems and networks which are spread across the city or even crossing the boundary of a city. Obviously, Smart City platform often leads to enlargement existing risks and introduction of new risks.

Security during data life cycle:IoT data originates remotely, often from equipment at the edge that emits analogue data from point of sensor location which is far from the traditional data centre or cloud. Also IoT technology produces data in volumes and levels of diversity that challenge traditional approaches to storage and processing. In short collection, processing, storage and proper deletion –

Every phase of data life may undergo a major changes due to IoT integration.

Security of networks:Civic authorities & other organizations involved may be using different technology stacks. Various wireless technologies are used for the integration of the sensors and remote systems. The wireless communication is inherently susceptible to sniffing, eves dropping attacks. To physically protect wired network cables spread across the city would have its own challenges. And unprotected points can be used for tapping the data.

Security of End Devices:In fact, Smart Phone may turn out to be the common point of the activities. The end point device where personal, home, business & public networks are likely to converge. It is obvious that Digital India gains the momentum; mobile phones are going process volumes of transactions. Already we are witnessing a trend of increased exploitation or misuse of mobile phones due to existing security weaknesses.Smart phones and apps need to enhance security features.

Securing organizations: IT infrastructure of the civic bodies should be matured and agile enough to enable such integrated services.

For example huge data generated by IoT may be required to enable detection of cyber threats faster. Its analyses and correlation of every event across the IT environment, their prioritization according to compliance and risk and

displays customizable dashboard.

Government being the key stakeholder in Smart City implementation; the derisking its services and authorities can be expected to due attention.

Security of End Consumers:The ownership for the security points considered above can be easily defined. The real big challenge could be protecting the end consumers. These are the expected beneficiary of Smart Cities. But they often do not get proper representation and most of them may not be able judge the risks presented to them. Unfortunately, most of them get overwhelmed by the media hype created around the Smart City benefits and do not pay attention to the hidden risks.

As Smart City environment would further accelerate exploitation of end points; education of the end consumer is absolutely essential. Cities in In India have significant variations in digital literacy levels across the citizens; so end consumer need to be educated on points such as:

* What is security needed for that individual? Which phone to buy? And how to configure?

* Which apps to be loaded on the phone? And which are to be removed? Each Smart City initiative to have its own road map for implementation; to deliver expected innovation and a robustness bottom line.Overall approachshould be to remain ahead of the threats and not just responding to them after the damage is done!