{"id":5177,"date":"2016-02-12T18:47:43","date_gmt":"2016-02-12T18:47:43","guid":{"rendered":"https:\/\/kasperskydaily.com\/b2b\/?p=5177"},"modified":"2020-02-26T11:05:23","modified_gmt":"2020-02-26T16:05:23","slug":"securing-smart-city-transport-two-studies","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/securing-smart-city-transport-two-studies\/5177\/","title":{"rendered":"Securing smart city transport: two studies"},"content":{"rendered":"

Securing Smart Cities<\/a>, a not-for-profit global initiative that aims to solve the existing and future cybersecurity problems of smart cities, has contributed<\/a> to two studies of The European Union Agency for Network and Information Security (ENISA) on the cybersecurity of public transport in a smart city.<\/p>\n

We previously posted about the Securing Smart Cities initiative just last December. Smart City is a long-standing concept which is becoming a reality. However, the path to realization may become hugely problematic, and may potentially lead to large-scale disasters unless approached the right way. What is \u2018right\u2019 here?<\/p>\n

It should come as no surprise that the main concern for Kaspersky Lab and our partners within SSC initiative is related to the cybersecurity of the \u201csmart\u201d infrastructure.<\/p>\n

In fact, this infrastructure in general and so-called \u201cintelligent public transport\u201d (IPT) in particular relies heavily on network communications and IT. Because of this, \u201csmart\u201d transportation systems become \u201ca natural target\u201d for cyberthreats that will have an impact \u201cnot only on the operations of the transport service, but also on the whole economy and potentially on the health and safety of citizens\u201d.<\/p>\n

Securing smart city transport: two studies #smartcity<\/p>Tweet<\/a><\/blockquote>\n

It is therefore vital that cybersecurity is an important part of all smart transport projects from their very conception.<\/p>\n

Despite gains, connectivity may fall victim to a cyberattack unless counter-measures are established by default along the whole perimeter. To ensure this perimeter\u2019s security \u2013 and the proper level of resilience \u2013 risks should be properly assessed and all possible \u201centry points\u201d and targets acknowledged.<\/p>\n

But there are no established policies of ensuring cybersecurity on transport in EU for now \u2013 the awareness level is low and it is difficult for operators to dedicate budget to this specific objective.<\/p>\n

Both ENISA studies are there to help. The first one \u201cproposes a pragmatic approach that will highlight the critical assets of Intelligent Public Transport systems\u201d, giving an overview of the existing security measures (good practices) that could be deployed to protect these critical assets and ensure security of the IPT system, based on a survey and interviews of experts from the sector, municipalities, operators, manufacturers, and policy makers.<\/p>\n

It is important to mention that \u201cGood practices\u201d are not limited to technical measures: they also integrate policies, standards, operational, and organizational measures for the involved parties, so that they could more easily understand which critical assets to protect and how.<\/p>\n

Both studies address best practices in regard to #smartcity transportation systems security. These practices are applicable elsewhere too<\/p>Tweet<\/a><\/blockquote>\n

The study identifies critical assets of intelligent transport systems from a business and societal point of view and highlights good security practices against cyberthreats.<\/p>\n

The second study states its objective is \u201cto model the architecture of the transport sector\u201d in smart cities and \u201cto describe good cyber security practices of IPT operators.\u201d<\/p>\n

The good practices are put into a relationship with different city maturity levels, so that representatives of operators and municipalities can quickly assess whether or not they lag behind other cities with the same maturity level in terms of cyber security and, if so, to take appropriate actions.<\/p>\n

We thought\u00a0these studies might be\u00a0interesting to all IT-related businesses. Feel free to familiarize yourselves with them via these links:<\/p>\n