Are smart cities at risk from hackers?

From traffic lights to bins, across the world, internet-connected technology is being integrated across all manner of everyday city infrastructure. Smart city technology can provide cities with real-time information which can be analysed to offer insights into how people interact with the city. These insights can be used to make cities operate more efficiently and ensure that cities are responding to the changing needs of their citizens. 

However, like any internet-connected device, smart city infrastructure runs the risk of being targeted by bad actors who wish to disrupt the operation of city life. 

This blog post explores the extent to which smart cities are vulnerable to attack by hackers and considers the steps that can be taken to prevent them from being compromised by nefarious actors. 

Connected and vulnerable

It’s an unfortunate fact of our increasingly more connected lives that as we connect more devices to the internet, we provide hackers with more opportunities to access our devices, compromise our networks, and gain access to personal information. In recent years, as we have added more Internet of Things (IoT) devices to our home networks, such as smart lightbulbs and thermostats, there is a chance we may be weakening the overall security of our networks. Experts have warned that these small IoT devices may not have the necessary level of sophisticated defences required to protect them from attack. 

Naturally, as these devices normally perform relatively inconsequential tasks (such as turning on a lamp) and don’t tend to host a great deal of personal data, many consumers do not consider the danger they could pose if compromised. Research has found that hackers may be able to gain access to entire home networks through hacking a single IoT device. This can enable hackers to access other connected devices, such as a phone, which holds a large amount of personal data. This can allow hackers to steal personal data, covertly spy on unknowing users, and gain access to email/social media/bank accounts. 

Therefore, as more small-scale infrastructure is connected to the internet, hackers will have more opportunities to take advantage of devices with lax security. In the context of smart cities, these vulnerabilities may be able to gain access to systems that operate critical city infrastructure. 

Smart city vulnerabilities

A key component of the development of smart cities is the fostering of a network of interconnected devices which cover a wide variety of city activities and functions. Through collecting and analysing this data, cities will be able to improve the way they operate in real-time and better respond to the needs of citizens. As such, smart city technology will have to be integrated into systems as simple as a streetlight and as complex as the public transit system. 

As previously discussed, IoT devices have varying levels of protection against hackers, and this is no different in the context of the smart city. Research conducted by UC Berkley found that small smart city infrastructure, such as CCTV systems and traffic lights, were more vulnerable to attack than more significant infrastructure, such as smart waste and water management systems. Vulnerabilities at any point of a network can allow hackers to gain access and potentially to compromise a more critical part of city infrastructure. 

Recently published guidance from the National Cyber Security Centre (NCSC) indicated that smart cities are a target for hackers, and warned that if systems are compromised there may be “destructive impacts”. For example, if a hacker can gain access to a smart traffic management system, they may be able to take the system offline and create traffic gridlock across a city. This would cause mass disruption and prevent people from moving around, which could result in threats to public safety. As a result, ensuring smart cities are protected from bad actors will be crucial as more city infrastructure is integrated into smart internet-connected systems. 

Protecting the smart city

Although smart cities will undoubtedly be a target for hackers, several actions can be taken to protect them from attack, and mitigations can be put in place to protect the wider smart city network if a single device is compromised. Ensuring that smart cities are designed with security at their core is vital. Adding on security at a later date will be ineffective and experts believe a “bolt-on” approach may pose more of a security risk. 

Guidance from the NCSC sets out the importance of understanding who is supplying the infrastructure and being aware that some companies may have links to foreign governments who may wish to gain access to UK systems for nefarious purposes. 

Key steps that the NSCS advise should be taken to protect the smart city include:

  • Understanding the goal of the smart city and potential unforeseen impacts.
  • Examining the threats posed to the smart city.
  • Setting out the governance of smart city cybersecurity and ensuring staff have the correct skills.
  • Understanding the role of suppliers in the delivery of smart city infrastructure and cybersecurity.
  • Being aware of relevant legal and regulatory requirements (particularly surrounding data protection).

Final thoughts

The development of smart cities may provide opportunities to create cities that are more efficient and responsive to the needs of citizens. Unfortunately, as more infrastructure is connected to the internet, hackers are provided with more opportunities to disrupt systems and harvest personal data. The levels of disruption and data will undoubtedly make smart cities an attractive target for bad actors.

Therefore, to reap the benefits of the smart city, it will be vital that security is at the core of the development of the smart city, and that local authorities ensure they have a clear understanding of who is responsible for cybersecurity. 


If you liked this article you may also be interested in reading:

The 5G arms race: the UK’s strategy to become a global leader in 5G technology

By Steven McGinty

On 8 March, the UK Government published their strategy for developing 5G – the next generation of wireless communication technologies.

Released on the same day as the Spring Budget, the strategy builds on the government’s Digital Strategy and Industrial Strategy, and sets out the government’s ambition to become a global leader in 5G.

Accelerating the deployment of 5G networks, maximising the productivity and efficiency benefits to the UK from 5G, creating new opportunities for UK businesses, and encouraging inward investment, are the strategy’s main objectives.

If the UK makes progress in these areas, the strategy argues, 5G infrastructure has the potential to become an enabler of smart city technologies, such as autonomous vehicles and advanced manufacturing, and to support the expansion of the Internet of Things – the interconnection of people, places, and everyday objects.

5G Innovation Network

Although the strategy highlights the enormous potential of 5G, it makes clear that 5G technologies are still in development, and that the majority of funding will need to come from the private sector.

To support the growth of a commercial market, the strategy explains, a new 5G trials and testbed programme will be introduced – through a national 5G Innovation Network – to coordinate the development of 5G services and applications. This programme will help government and private sector partners understand the economics of deploying 5G networks, ensuring that technologies can he delivered in a cost-effective way, and enabling best practice to be captured and knowledge disseminated.

The government is investing an initial £16m into the programme (involving partners such as UK Research and Innovation and the Government Digital Service), and has targeted a trial of end-to-end 5G (high speed connectivity without the need for intermediary services) by 2018. In February, Ericsson announced that they had a successful end-to-end 5G trial in Sweden, alongside partners SK Telecom Korea.

Improving regulations

To support the development of 5G, the strategy suggests that there may need to be regulatory changes, particularly in the planning system. As such, the government has committed to reviewing current regulations before the end of 2017, and then to conduct regular reviews, as partners learn more from their 5G trials.

Local connectivity plans

The strategy highlights the important role local regions play in the deployment of mobile technologies, and explains that the government will be consulting with councils on how planning policies can be used to provide high quality digital infrastructure.

However, it also suggests that there may be a case for introducing ‘local connectivity plans’, which would outline how local areas intend to meet their digital connectivity needs. Interestingly, the strategy highlights that evidence, such as local plans, may be taken into account when the government is making funding decisions for local infrastructure projects.

Coverage and capacity, infrastructure sharing, and spectrum

The strategy accepts that the move towards 5G won’t be as straightforward as the move from 3G to 4G. Instead, 5G technology will be developed alongside the expansion of the 4G network.

In addition, the government has accepted the recommendations of the National Infrastructure Commission (NIC)’s ‘Connected Future’ report, which states that unnecessary barriers to infrastructure sharing between telecommunications companies must be tackled. The strategy states that it will explore options for providing a clearer and more robust framework for sharing.

Increasing the available radio spectrum was also highlighted as key to developing 5G technology. The strategy notes that the government will work with Ofcom to review the spectrum licensing regime to help facilitate the development of 4G and 5G networks.

5G strategy’s reception

Natalie Trainor, technology projects expert at law firm Pinsent Masons, has welcomed the new 5G strategy, explaining that:

“…technology and major infrastructure projects will become much more interlinked in future and that the plans outlined can help the UK take forward the opportunities this will present.”

In particular, Ms Trainor sees the establishment of the Digital Infrastructure Officials Group – which will bring together senior staff from across departments – as a way of providing greater awareness and co-ordination of major public projects that involve digital infrastructure. Ms Trainor also hopes that the new group will encourage the Department for Transport and the Department for Culture, Media & Sport (DCMS) to work with industry to develop digital connectivity on the UK’s road and rail networks.

Professor Will Stewart, Vice President of the Institution of Engineering and Technology, similarly welcomes the new strategy but highlights that the funding announced will ‘not come anywhere close’ to the investment required to deliver 5G across the UK. In addition, he also makes it clear that coverage and regulatory change will be vital, stating that:

The biggest challenge for government will be improving coverage for all, as 5G cannot transform what it doesn’t cover. And achieving universal coverage for the UK, outside high-capacity urban areas, will not be affordable or achievable without regulatory change.”

Former Ofcom director and author of The 5G Myth, Professor William Webb, has also applauded the government’s plans, even though he is an outspoken critic of the 5G industry. For Professor Webb, the strategy recognises that we are in the early stages of 5G technology, and that there is still a need to develop 4G networks.

Final thoughts

5G technology provides the UK with the opportunity to become a genuinely smart society. Yet, as the strategy acknowledges, 5G is still in its infancy and the idea of a 5G network across the UK is a long way down the road.

The new 5G strategy includes a number of positive steps, such as listening to the recommendations of the NIC report, and exploring the realities of deploying 5G networks. This cautious approach is unlikely to show any significant progress in the short term, but does provide a focal point for academia, government, and industry to rally around.


Follow us on Twitter to see what developments in public and social policy are interesting our research team. If you found this article interesting, you may also like to read our other smart city articles.

Gigabit cities: laying the foundations for the information society

Man sitting at a desk, with stars and nebula's behind him

By Steven McGinty

According to the Foundation for Information Society Policy (FISP), an independent think tank, London’s poor broadband infrastructure will threaten the capital’s ability to compete with other global cities in the future.

David Brunnen, FISP member and an independent telecoms infrastructure expert, explains that although demand for broadband is growing rapidly, the capital still relies mostly on networks of copper wires, which Tech City have described as ‘not fit for purpose’.

The solution, the foundation advocates, is to create a new infrastructure agency, Digital for Londoners (DfL), to ensure that London becomes a ‘Gigabit City’ by 2020.

What are gigabit cities?

In simple terms, gigabit cites provide citizens, business and governments with access to gigabit internet services (1,000 megabits per second or higher). By replacing old copper cables for pure fibre infrastructure, cities can enable public services to take advantage of technology, support businesses to innovate, and improve the lives of citizens. As US President Barack Obama explains, ‘it’s like unleashing a tornado of innovation’.

In the UK, CityFibre, is the main provider of Gigabit Cities. Their network covers 40 cities, including Glasgow and Bristol, across major data centres and busy internet traffic points, and provides 260,000 businesses and 3.7 million homes with gigabit broadband.

On 22nd September 2016, Northampton became the latest UK gigabit city. In an agreement between CityFibre and dbfb, a Northampton-based business internet service provider, businesses will now receive internet speeds of up to 100 times faster than the UK’s average. Paul Griffiths, from Northamptonshire Chamber of Commerce, highlights that this investment will play an important role for start-up businesses competing globally.

The initiative will also help Northampton County Council achieve their target of making gigabit broadband available, countywide, by the end of 2017.

Chattanooga

In 2010, Chattanooga, Tennessee, became one of the first cities to make gigabit connectivity widely available. Its mayor, Andy Berke, has described its introduction as a significant source of the city’s economic renewal.

Gigabit broadband has allowed a tech industry to emerge from a city more commonly associated with heavy manufacturing. Tech companies and investment have been drawn by the ‘The Gig’ – the local name for the network – resulting in the conversion of former factory buildings into flats, open-space offices, restaurants and shops. In the past three years, the city’s unemployment rate has dropped from 7.8% to 4.1%. The mayor has also linked the city’s wage growth to jobs in the technology sector.

‘The Gig’ was funded by a combination of public and private investment. EPB, the city-owned utility company, borrowed $219 million and received a $111 million grant from the US Government. This government-led approach has given Chattanooga broadband speeds greater than Google Fibre, a major gigabit broadband provider. Wired magazine suggests that government involvement raises expectations, and encourages commercial providers to improve their infrastructure.

Stokab, Stockholm

The Stockholm city government have one of the oldest gigabit strategies, founding the private company, Stokab, to deploy and manage their city-wide fibre network in 1994. Stokab was created to help the city benefit from the new digital era by limiting multiple network deployments, and by stimulating the technology sector.  The end-to-end fibre broadband network serves 700 service provider businesses and connects 90% of residential premises.

The gigabit network has provided a wide variety of economic benefits, including:

  • becoming a catalyst for the technology sector (The Kista Science Park has over 1000 technology businesses, with 24,000 employees)
  • creating growth and jobs valued at €900 million
  • providing low cost broadband services to business – through increased competition – has resulted in an estimated €8.5 million worth of savings
  • increasing housing values by €200 million and rental values by €3.5 million per year

Digital inclusion

Although gigabit broadband could create limitless opportunities, it also has the potential to exacerbate existing inequalities. Citizens, and even small businesses, could lose out if they don’t have the skills or technologies to access the internet.

Salford Council realises the important role technology plays in creating vibrant communities. As part of their rollout of gigabit broadband services across social housing, the council are introducing a digital skills campaign to encourage more residents online. Volunteers are being recruited to assist neighbours who are less digitally savvy. As encouragement, they are being offered a free IPad and a free broadband service, if they train more than 20 people a year.

Final thoughts

To compete globally, cities will be looking to introduce gigabit broadband infrastructure. London, as a global technology hub and a key driver for growth across the UK, will need to invest in order to support businesses and meet the expectations of citizens. Government may have to provide greater leadership in order to incentivise private sector involvement. Equally, digital exclusion will need to be tackled, to ensure that everyone can participate in the information society.


Follow us on Twitter to see what developments in public and social policy are interesting our research team. If you found this article interesting, you may also like to read our other smart cities articles.