1. Cybersecurity of Smart City Technologies Assessing the Security, Interoperability and Governance Issues Angelos Stavrou, J.P. Auffret, Dan Fleck and Constantinos Kolias (Center for Assurance Research and Engineering – CARE) The Challenges of Urbanization and the Promise Smart Cities 54 percent of the world’s population now live in cities increasing from 30 percent in 1950. The world’s urban population is projected to increase by 2.5 billion inhabitants by 2050 with the large majority in Asia and Africa. Smart City initiatives building upon innovation in information and communication technology (ICT), Internet of Things and mobility, aim to improve quality of life for residents and to address the challenges of urbanization including transport, health, safety, social inclusion and environmental sustainability. India, for example, is planning for 100 Smart Cities as part of its Smart City Mission. Interested in Partnering with Us? The Center for Assurance Research and Engineering and the School of Business seek partners who share our interest in Smart Cities and would like to join us in the research to help Smart Cities lower risks and exposure to cyber threats. Contact: Shanghai is one of 23 megacities with populations over 10 million. References “The Future of Smart Cities: Cyber-Physical Infrastructure Risk”, Department of Homeland Security, August 2015. “World Urbanization Prospects”, U.N. Department of Economic and Social Affairs (U.N. DESA), 2014. Evaluating Interoperability of Smart City Technologies Does the tool provide an API? Is the data model well defined? Does it use common authentication/authorization protocols? Can the system adapt to changing data inputs/output needs? Smart City Reliance on Cybersecurity With the foundation of ICT, Smart Cities rely on cybersecurity. However, many governments have limited budgets and technology expertise in both the cybersecurity technical and strategic perspectives. The Department of Homeland Security (DHS) highlights the challenges in the context of changing dynamics between urban and rural; legacy and new; inconsistent technology adoption; and increased automation. Research Goals To assist in providing a cybersecurity roadmap in the planning for Smart City initiatives, the project proposes to: Develop a detailed security testing and assessment plan for Smart City technologies. Develop a detailed interoperability assessment plan for Smart City technologies. Assess the corresponding policy, legislative and governance considerations for adoption of Smart City cybersecurity technologies. Angelos Stavrou astavrou@gmu.edu 703-993-3772 J.P. Auffret jauffret@gmu.edu 703-993-5641 Related Work The project builds upon work with DHS, DARPA, NIST, NSF, IBM and APEC on mobile and network security, IoT security, critical infrastructure and SCADA security and standards, and IT and cybersecurity leadership and governance. Evaluating Security of Smart City Technologies Candidate sectors include transportation, healthcare, public safety, energy and local governance. Cybersecurity elements include cryptography, updates, authentication and audit / attestation. Smart City platforms include FI-WARE, Webinos and CitySDK. Sample Transportation Tool: A mobile app, Reroute.it, calculates the costs and environmental impacts of transportation choices. Developing a Roadmap for Smart City Cybersecurity Governance What are the key elements of Smart City cybersecurity readiness? What are the enabling policy, legislation, leadership and institutional capacity? Los Angeles and New York are the two megacities in the United States.