Benefits and Cybersecurity and Privacy Risks - Revision history

Pinfold at 18:34, March 14, 2022

2022-03-14T18:34:52Z

← Older revision		Revision as of 18:34, March 14, 2022
Line 1:		Line 1:
	{{Chapter		{{Chapter
			\| image = PrivacyChapter.jpg
	\| blueprint = Cybersecurity and Privacy		\| blueprint = Cybersecurity and Privacy
	\| sectors = Cybersecurity and Privacy		\| sectors = Cybersecurity and Privacy
Line 7:		Line 8:
	\| document = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf		\| document = 2019_GCTC-SC3_Cybersecurity_and_Privacy_Advisory_Committee_Guidebook_July_2019.pdf
	\| chapter = 2001		\| chapter = 2001
			\| summary = Cities and communities stand to harvest unprecedented benefits from advances in information and communications technologies (ICT), in general, and Internet of Things (IoT) and Artificial Intelligence (AI), in particular. Smart cities inevitably introduce new or heighten existing cyber risks, which demand proper consideration in design to ensure the optimal realization of intended Smart City outcomes.
	}}		}}
	~~__NOTOC__~~
	~~Cities and communities stand to harvest unprecedented benefits from advances in~~
	~~information and communications technologies (ICT), in general, and Internet of~~
	~~Things (IoT) and Artificial Intelligence (AI), in particular. Smart cities inevitably~~
	~~introduce new or heighten existing cyber risks, which demand proper consideration~~
	~~in design to ensure the optimal realization of intended Smart City outcomes.~~
	=Smart Cities Benefits=		=Smart Cities Benefits=
	Smart cities are associated solutions and capabilities defined by the integration of		Smart cities are associated solutions and capabilities defined by the integration of

Pinfold at 03:18, January 11, 2022

2022-01-11T03:18:56Z

← Older revision		Revision as of 03:18, January 11, 2022
Line 2:		Line 2:
	\| blueprint = Cybersecurity and Privacy		\| blueprint = Cybersecurity and Privacy
	\| sectors = Cybersecurity and Privacy		\| sectors = Cybersecurity and Privacy
	\| authors = Lan Jenson, David Balenson, Adnan Baykal, Gary Dennis, Wayne Dennis~~, Alex Huppenthal~~, Damon Kachur, Benny Lee, Carmen Marsh, Aleta Nye, Carmen Parada, Renil Paramel, Bill Pugh, Maryam Rahmani, Carter Schoenberg, Sushmita Senmajumdar, Deborah Shands, Dean Skidmore, Scott Tousley, Ed Walker, Ruwan Welaratna, Paul Wertz, Peter Wong		\| authors = Lan Jenson, David Balenson, Adnan Baykal, Gary Dennis, Wayne Dennis, Damon Kachur, Benny Lee, Carmen Marsh, Aleta Nye, Carmen Parada, Renil Paramel, Bill Pugh, Maryam Rahmani, Carter Schoenberg, Sushmita Senmajumdar, Deborah Shands, Dean Skidmore, Scott Tousley, Edward Walker, Ruwan Welaratna, Paul Wertz, Peter Wong
	\| poc = Lan Jenson		\| poc = Lan Jenson
	\| email = lan@cybertrustamerica.org		\| email = lan@cybertrustamerica.org

Pinfold at 06:24, December 22, 2021

2021-12-22T06:24:14Z

← Older revision		Revision as of 06:24, December 22, 2021
Line 26:		Line 26:
	productivity, development, and opportunity.		productivity, development, and opportunity.

	[[File:WhyDoCitiesBecomeSmart.jpg\|centre\|800px\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]		[[File:WhyDoCitiesBecomeSmart.jpg\|centre\|800px\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]]

			[[File:iot-ddos-project-description-draft.pdf\|centre\|300px\|Migrating IoT-Based ]]

	While there are many benefits associated with the promise of Smart Cities, there are		While there are many benefits associated with the promise of Smart Cities, there are

Pinfold at 06:23, December 22, 2021

2021-12-22T06:23:36Z

← Older revision		Revision as of 06:23, December 22, 2021
Line 26:		Line 26:
	productivity, development, and opportunity.		productivity, development, and opportunity.

	[[File:WhyDoCitiesBecomeSmart.jpg\|800px\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]		[[File:WhyDoCitiesBecomeSmart.jpg\|centre\|800px\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]

	While there are many benefits associated with the promise of Smart Cities, there are		While there are many benefits associated with the promise of Smart Cities, there are

Pinfold at 06:21, December 22, 2021

2021-12-22T06:21:18Z

← Older revision		Revision as of 06:21, December 22, 2021
Line 26:		Line 26:
	productivity, development, and opportunity.		productivity, development, and opportunity.

	[[File:WhyDoCitiesBecomeSmart.jpg\|~~700px~~\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]		[[File:WhyDoCitiesBecomeSmart.jpg\|800px\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]

	While there are many benefits associated with the promise of Smart Cities, there are		While there are many benefits associated with the promise of Smart Cities, there are

Pinfold at 06:20, December 22, 2021

2021-12-22T06:20:25Z

← Older revision		Revision as of 06:20, December 22, 2021
Line 26:		Line 26:
	productivity, development, and opportunity.		productivity, development, and opportunity.

	[[File:WhyDoCitiesBecomeSmart.jpg\|~~1000px~~\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]		[[File:WhyDoCitiesBecomeSmart.jpg\|700px\|National Cybersecurity Center of Excellence research on mitigating IoT-based DDoS as presented by Tim Polk, Russ Gyurek, and Joshua Lawton at CPAC Cybersecurity Symposium for Smart Cities in San Jose, California, on October 3, 2018.]] [[File:iot-ddos-project-description-draft.pdf\|300px\|Migrating IoT-Based ]]

	While there are many benefits associated with the promise of Smart Cities, there are		While there are many benefits associated with the promise of Smart Cities, there are

Pinfold at 19:06, December 19, 2021

2021-12-19T19:06:08Z

@@ Line 102: / Line 102: @@
 based on publicly-available information.
 {| class="wikitable"
-|colspan="2"|[https://www.npr.org/2018/12/05/673958138/georgia-charges-iranians-in-ransomware-attack-on-atlanta <u>Atlanta Ransomware (March 2018)</u>]
+!colspan="2"|[https://www.npr.org/2018/12/05/673958138/georgia-charges-iranians-in-ransomware-attack-on-atlanta <u>Atlanta Ransomware (March 2018)</u>]
 |-
 |colspan="2"|In March 2018, the City of Atlanta, Georgia, fell victim to a SamSam ransomware attack. Government agencies were locked out of their systems, and applications and services were forced offline - in some cases for months. The attackers were asking for approximately $51,000 in Bitcoin as a ransom payment. Similar attacks were allegedly conducted in ten U.S. states and Canada - including Newark, New Jersey; the Port of San Diego; and the Colorado Department of Transportation.
@@ Line 117: / Line 117: @@
 {| class="wikitable"
-|colspan="2"|[https://govinsider.asia/innovation/singhealth-breach-wake-call-smart-nation-singapore/ <u>SingHealth (Singapore) Breach (June-July 2018)</u>]
+!colspan="2"|[https://govinsider.asia/innovation/singhealth-breach-wake-call-smart-nation-singapore/ <u>SingHealth (Singapore) Breach (June-July 2018)</u>]
 |-
 |colspan="2"|For about a week during the summer of 2018, hackers actively targeted a SingHealth database and were successful in exfiltrating health-related data on 1.5 million patients.
@@ Line 130: / Line 130: @@
 |Personally-identifiable information, including demographic data, identification numbers, and some prescription medication history, was stolen. This data could be leveraged for further nefarious purposes, such as identity theft, fraud, or black market pharmaceuticals. Singapore paused all Smart Nation efforts in order to review cybersecurity and privacy practices. In January 2019, Singapore’s Personal Data Protection Commission announced fines totaling S$1M (approximately US$740,000) against SingHealth and its IT vendor.
 |}

Pinfold at 18:52, December 19, 2021

2021-12-19T18:52:50Z

@@ Line 114: / Line 114: @@
 |<u>Consequence</u>
 |Hundreds of municipal online applications and services (e.g., court systems, bill payment, law enforcement ticketing) were disabled, and many data records were lost, including police dash camera recordings and legal records. Many of these functions were considered “mission critical.” Nearly 4,000 computers were locked by the ransomware. The financial cost of response, remediation, and recovery has increased from early estimates of $2.7 million to $17 million (including $6 million in contracts for security services and software updates and $1.1 million in new IT equipment).
 |}

Pinfold at 18:47, December 19, 2021

2021-12-19T18:47:10Z

← Older revision		Revision as of 18:47, December 19, 2021
Line 111:		Line 111:
	\|<u>Threat</u>		\|<u>Threat</u>
	\|In November 2018, two Iranian nationals were charged with executing the SamSam ransomware attack; they are not considered to be associated with a nation-state actor.		\|In November 2018, two Iranian nationals were charged with executing the SamSam ransomware attack; they are not considered to be associated with a nation-state actor.
			\|-
			\|<u>Consequence</u>
			\|Hundreds of municipal online applications and services (e.g., court systems, bill payment, law enforcement ticketing) were disabled, and many data records were lost, including police dash camera recordings and legal records. Many of these functions were considered “mission critical.” Nearly 4,000 computers were locked by the ransomware. The financial cost of response, remediation, and recovery has increased from early estimates of $2.7 million to $17 million (including $6 million in contracts for security services and software updates and $1.1 million in new IT equipment).
	\|}		\|}

Pinfold at 18:45, December 19, 2021

2021-12-19T18:45:09Z

← Older revision		Revision as of 18:45, December 19, 2021
Line 104:		Line 104:
	\|colspan="2"\|[https://www.npr.org/2018/12/05/673958138/georgia-charges-iranians-in-ransomware-attack-on-atlanta <u>Atlanta Ransomware (March 2018)</u>]		\|colspan="2"\|[https://www.npr.org/2018/12/05/673958138/georgia-charges-iranians-in-ransomware-attack-on-atlanta <u>Atlanta Ransomware (March 2018)</u>]
	\|-		\|-
	\|colspan="2"\|In March 2018, the City of Atlanta, Georgia, fell victim to a SamSam ransomware attack. Government agencies were locked out of their systems, and applications		\|colspan="2"\|In March 2018, the City of Atlanta, Georgia, fell victim to a SamSam ransomware attack. Government agencies were locked out of their systems, and applications and services were forced offline - in some cases for months. The attackers were asking for approximately $51,000 in Bitcoin as a ransom payment. Similar attacks were allegedly conducted in ten U.S. states and Canada - including Newark, New Jersey; the Port of San Diego; and the Colorado Department of Transportation.
	and services were forced offline - in some cases for months. The attackers were asking for approximately $51,000 in Bitcoin as a ransom payment. Similar attacks were allegedly conducted in ten U.S. states and Canada - including Newark, New Jersey; the Port of San Diego; and the Colorado Department of Transportation.
	\|-		\|-
	\|<u>Vulnerability</u>		\|<u>Vulnerability</u>