IoT Security Governance Framework for Smart Cities: A Conceptual Approach
DOI:
https://doi.org/10.15662/IJARCST.2023.0604008Keywords:
Internet of Things, Smart Cities, IoT Security, Operational ResilienceAbstract
The fast growth of Smart Cities has expedited the adoption of Internet of Things (IoT) technology to improve urban infrastructure, public services, transportation, healthcare, energy management, environmental monitoring, and citizen involvement. Connected sensors, smart devices, intelligent communication networks and cloud-edge computing platforms create a huge amount of real-time data which enhances operational efficiency and supports informed decision making. However, the increased interconnectivity of IoT devices has introduced important security and privacy challenges, and governance and operational challenges such as unauthorised access, cyberattacks, data breaches, device compromise, insecure communication, regulatory compliance and service disruptions . Current IoT security solutions tend to focus on technical security measures such as encryption, authentication and intrusion detection, with relatively little attention given to overarching governance models that can incorporate organisational policies, security management, privacy protection, operational resilience and regulatory compliance. The proposed conceptual framework offers a structured methodology to municipalities, policy-makers and service providers for assessing governance maturity, identifying security gaps, enhancing privacy protection, enhancing regulatory compliance and improving resilience of urban IoT ecosystems. The qualitative comparative analysis shows that the proposed framework provides more comprehensive governance coverage than existing approaches to IoT security, combining governance, cybersecurity, privacy, infrastructure protection, compliance, and continuous improvement into a single lifecycle-based framework. The framework provides a realistic guidance for safe, resilient and sustainable Smart City development.
References
[1] National Institute of Standards and Technology (NIST), "Framework for Improving Critical Infrastructure Cybersecurity," Version 1.1, 2018.
[2] ISO/IEC 27001:2013, Information Technology—Security Techniques—Information Security Management Systems—Requirements, International Organization for Standardization, Geneva, Switzerland, 2013.
[3] R. Roman, J. Lopez, and M. Mambo, "Mobile Edge Computing, Fog Computing and the Internet of Things: A Survey," Future Generation Computer Systems, vol. 78, pp. 680–698, 2018.
[4] A. Zanella, N. Bui, A. Castellani, L. Vangelista, and M. Zorzi, "Internet of Things for Smart Cities," IEEE Internet of Things Journal, vol. 1, no. 1, pp. 22–32, 2014.
[5] O. Novo, "Blockchain Meets IoT: An Architecture for Scalable Access Management in IoT," IEEE Internet of Things Journal, vol. 5, no. 2, pp. 1184–1195, 2018.
[6] L. Atzori, A. Iera, and G. Morabito, "The Internet of Things: A Survey," Computer Networks, vol. 54, no. 15, pp. 2787–2805, 2010.
[7] D. Evans, "The Internet of Things: How the Next Evolution of the Internet Is Changing Everything," Cisco Internet Business Solutions Group White Paper, 2011.
[8] European Union Agency for Cybersecurity (ENISA), "Baseline Security Recommendations for IoT," 2017.
[9] ETSI, "Cyber Security for Consumer Internet of Things: Baseline Requirements," ETSI EN 303 645, 2020.
[10] W. Stallings, Network Security Essentials: Applications and Standards, 6th ed., Pearson, 2017.
[11] M. Ammar, G. Russello, and B. Crispo, "Internet of Things: A Survey on the Security of IoT Frameworks," Journal of Information Security and Applications, vol. 38, pp. 8–27, 2018.
[12] J. Granjal, E. Monteiro, and J. Silva, "Security for the Internet of Things: A Survey of Existing Protocols and Open Research Issues," IEEE Communications Surveys & Tutorials, vol. 17, no. 3, pp. 1294–1312, 2015.
[13] S. Sicari, A. Rizzardi, L. Grieco, and A. Coen-Porisini, "Security, Privacy and Trust in Internet of Things: The Road Ahead," Computer Networks, vol. 76, pp. 146–164, 2015.
[14] A. Alaba, M. Othman, I. Hashem, and F. Alotaibi, "Internet of Things Security: A Survey," Journal of Network and Computer Applications, vol. 88, pp. 10–28, 2017.
[15] M. Abomhara and G. M. Køien, "Security and Privacy in the Internet of Things: Current Status and Open Issues," International Conference on Privacy and Security in Mobile Systems, 2014.
