Lack of critical infrastructure cybersecurity investments in Smart Cities will seed the future IoT vulnerabilities

London, United Kingdom - 20 Aug 2019 - Urban population is on the rise worldwide and smart city development projects are harnessing the power of the Internet of Things (IoT) to develop more intelligent, efficient, and sustainable solutions. However, digital security investments in smart cities are severely lagging thus seeding the future vulnerabilities of the IoT ecosystem. The Financial, Information and Communication Technologies (ICT), and defense industries will account for 56% of the US$135 billion projected total cyber security spend in critical infrastructure in 2024, finds global tech market advisory firm ABI Research. The remaining 44% of the 2024 spend will be split between the Energy, Healthcare, Public Security, Transport and Water & Waste sectors – leaving them woefully underfunded and incredibly vulnerable to cyberattacks.

Smart cities are comprised of a highly complex, interdependent network of devices, systems, platforms, and users. Smart energy, utilities, water and wastage, parking and automotive, industrial and manufacturing, building automation, e-government and telemedicine, surveillance and public safety are just some of the verticals that vendors and governments must secure.

“Smart cities are increasingly under attack by a variety of threats. These include sophisticated cyberattacks on critical infrastructure,  bringing industrial control systems (ICS) to a grinding halt, abusing low-power wide area networks (LPWAN) and device communication hijacking, system lockdown threats caused by ransomware, manipulation of sensor data to cause widespread panic (e.g., disaster detection systems) and siphoning citizen, healthcare, consumer data, and personally identifiable information (PII), among many others,” explains Dimitrios Pavlakis, Industry Analyst at ABI Research. “In this increasingly connected technological landscape, every smart city service is as secure as its weakest link.”

Cloud service powerhouses like Microsoft, security leaders like Entrust Datacard and Rambus, cellular communication experts like Sierra Wireless, certification authorities like Globalsign, and multi-vertical service providers like Huawei are some of the key vendors providing smart city specific solutions. According to ABI Research there will be approximately 1.3 billion wide-area network smart city connections by 2024. Almost 50% of those connections are expected to be LPWA-LTE and LPWA Proprietary. Some LPWA protocols like the NB-IoT are attempting to tackle at least some digital and communication security challenges. However, the fact of the matter remains that these intrinsically lightweight cellular versions aim toward lowering bandwidth cost, increasing coverage, and lowering latency and are not, in general, capable of handling the increased number of cyber-threats in the interconnected smart city environment.

“Lack of cryptographic measures, poor encryption key management, non-existent secure device onboarding services, weaponized machine learning technologies by cyber-attackers, poor understanding of social engineering, and lack of protection versus Distributed Denial of Service (DDoS) attacks are just are some of the key issues contributing to the amplification of cyber-threats in smart city ecosystems. This is further exacerbated by the lack of digital security investments and will, unfortunately, jeopardize the key elements of intelligence, efficiency, and sustainability of future smart city deployments,” Pavlakis concludes.

These findings are from ABI Research’s Smart City Cybersecurity application analysis report. This report is part of the company’s Digital Securityresearch service, which includes research, data, and analyst insights. Based on extensive primary interviews, Application Analysis reports present in-depth analysis on key market trends and factors for a specific technology.