|
Work item:
|
Y.IoT-Smartcity-Risk
|
|
Subject/title:
|
Reference framework of cybersecurity risk management of IoT ecosystems on smart cities
|
|
Status:
|
[Carried to next study period]
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
-
|
|
Liaison:
|
ITU-T SG17, ITU-D SG2
|
|
Supporting members:
|
Universidad Tecnológica Nacional, Communication Technologies Group Corporation
|
|
Summary:
|
The incorporation of IoT is a critical component in the development of smart cities because it allows establishing a sensing layer of the different urban elements for abstracting their physical reality to the digital world. However, IoT can considerably expand the attack surface. Security attacks to critical infrastructures could affect the resilience of the city.
Security aspects of IoT ecosystems are due to:
- The heterogeneity of IoT solutions,
- The limitation of computational resources,
- The geographical expansion of the attack surface,
- The lack of security in the design, and
- The lack of standardization.
Several risk assessment methodologies are available for information systems, but for the IoT, context is likely they need to be adapted. The risk assessment methods in IoT ecosystems may consider the following aspects:
" IoT ecosystem changes continuously with the incorporation of new devices,
" Limited knowledge systems, most risk assessments are focused on traditional systems and do not consider IoT aspects, and
Based on the reasons aforesaid, a "Reference framework of cybersecurity risk management of IoT ecosystems on smart cities" is proposed, aiming at working on the establishment of KRI so that city officials can assess the level of risk in IoT ecosystems that are used in the development of a smart city. The contribution will allow cities to evaluate the cybersecurity aspects that allow them to support the sustainability and resilience aspects of cities.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2020-07-21 10:35:13
|
|
Last update:
2021-10-28 11:13:12
|
