OVERVIEW OF INFORMATION SECURITY THREATS IN THE SMART CITY ECOSYSTEM AND THEIR MINIMIZATION

 

Olesya A. Kakorina

Candidate of Sciences (Physics and Mathematics),

Head of the Department of Information Security,

Volgograd State University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Alexandra N. Panchenko

Student, Department of Information Security,

Volgograd State University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Nadezhda I. Khlybova

Student, Department of Pedagogy, Psychology and Social Work,

Volgograd State University
This email address is being protected from spambots. You need JavaScript enabled to view it.
Prosp. Universitetsky, 100, 400062 Volgograd, Russian Federation

 

Abstract. This scientific review analyzes information security threats within the smart city ecosystem, with a specific focus on the context of the Russian Federation. Smart cities, characterized by the deep integration of digital technologies like the Internet of Things (IoT), big data, and cloud services into urban infrastructure, significantly enhance management efficiency and citizen quality of life. However, this digital transformation introduces severe cybersecurity vulnerabilities that can disrupt critical services such as energy, water supply, and public safety systems and endanger residents. The article systematically examines the technical threats targeting key components, including vulnerable IoT devices, industrial control systems (ICS), communication networks, and city data platforms. It further provides contemporary Russian case studies, such as unauthorized access to Moscow surveillance cameras and cyberattacks on utility companies, to illustrate real-world risks and consequences. In response, the work explores a dual approach to risk minimization. It reviews essential technical measures like network segmentation, encryption, and continuous monitoring. Simultaneously, it outlines the evolving Russian regulatory framework, including laws on Critical Information Infrastructure (CII) security and mandates for import substitution in cybersecurity solutions. The conclusion emphasizes that ensuring a resilient smart city requires a proactive, comprehensive strategy that integrates advanced technological protections with strict adherence to and development of national regulatory standards.

 

Key words: smart city, information security, cybersecurity vulnerabilities, critical information infrastructure, Internet of Things, cybersecurity, risk minimization, regulatory control.

 

This work is licensed under a Creative Commons Attribution 4.0 International License.