The global non-profit initiative "Securing Smart Cities, Whose mission is to solve the digital security problems that "smart cities" will face directly and in the future, has contributed to the development of two studies by the European Network and Information Security AgencyENISA), on the digital security of public transport in a "smart city".
photo: Fortune.com
The first study, entitled "Cybersecurity and Resilience of Intelligent Public Transport. Good Practices and Recommendations», επικεντρώνεται στην protection των κρίσιμων περιουσιακών στοιχείων για τις «Έξυπνες Δημόσιες Συγκοινωνίες». Τα περιουσιακά στοιχεία και μέσα που περιλαμβάνονται στη μελέτη (π.χ. μετρό, λεωφορεία, τραμ κ.α.) συμβάλλουν στην εύρυθμη λειτουργία των τοπικών δικτύων συγκοινωνιών και μπορούν να θεωρηθούν ως «εσωτερικά» στοιχεία για τους διαχειριστές «Έξυπνων Συστημάτων Μαζικής Μεταφοράς». Η μελέτη προσδιορίζει αυτά τα κρίσιμα στοιχεία από επιχειρησιακή και κοινωνική άποψη, αναδεικνύοντας τις ορθές πρακτικές ασφάλειας απέναντι στις ψηφιακές απειλές, προκειμένου να ενισχυθεί η ανθεκτικότητα των «Έξυπνων Δημόσιων Συγκοινωνιών».
The second study, titled "Architecture Model of the Transport Sector in Smart Cities", highlights the transport architecture in "smart cities" and highlights good digital security practices by providing practical and tangible guidance to administrators of "Intelligent Public Systems Communications ".
A well designed and "smart" public transport system is essential for any modern and comfortable city. At the same time, it is a cornerstone of the concept of "smart city". However, a "smart" public transport system relies heavily on communications networks and IT systems, which may make the system and the city vulnerable to digital invasions. It is therefore vital that digital security is an important part of the design and operation of each "smart transport" project.
Η research for "Smart Cities" highlights a fully interconnected modern city. However, it is impossible to protect public transport effectively without considering its interaction with a city's energy, telecommunications and public safety systems. A single weakness in any of these systems could be the basis for an attacker trying to exploit the rest. The attacker could trigger an "avalanche" of events, negatively affecting every aspect of a city's life and causing significant economic and social damage.
"It was a great honor we shared with him ENISA και την υπόλοιπη ομάδα εργασίας την εμπειρία μας σε θέματα ασφάλειας, με στόχο την προστασία των δημόσιων συγκοινωνιών. Πιστεύουμε ότι η cooperation between regulators, equipment and software suppliers, transport system operators and safety organizations is the only way to develop a truly reliable and secure environment for a modern city's transport systems'' comments Sergey Gordeychik, Head of Security Services and Deputy CTO of Kaspersky Lab, as well as a member of the initiative Securing Smart Cities.
Both studies are available on the ENISA website at the following links:
Securing Smart Cities
Cyber Security and Resilience of Intelligent Public Transport. Good practices and recommendations
Architectural model of the transport sector in Smart Cities
