Security by design on IoT devices and smart city systems

Bernardes, Kofuji, Doin and Gallo

Association promoted workshop during Connected Smart Cities

Supporter of Connected Smart Cities, held on September 4th and 5th, 2018, at the Frei Caneca Convention Center, in São Paulo, ABES promoted, as part of the event's official program, the Workshop Cidades Conectadas, in the Villa Lobos room, this Wednesday (04), which discussed cyber security and risks, data protection, compliance, ways to promote and develop cities and education and citizen empowerment of smart and connected cities.
 
The first panel of the afternoon dealt with Cybersecurity Risks in Smart Cities, in moderation by Jonny Doin, vice president of Cybersecurity at the Smart City Business America Institute (ISCBA), who stressed that it is a challenge for suppliers and public managers to ensure the functioning , the security and integrity of data and systems in smart cities.
 
Multidisciplinary approach - Sergio Takeo Kofuji, professor at Poli - USP, spoke about the challenges of the academic environment in keeping up with the dynamism in the development of new technologies applied in smart cities. In this context, universities are not managing to incorporate new disciplines in their curricula so quickly, nor are they promoting multidisciplinary integration for the elaboration and implementation of smart city projects, which requires the participation of architects, engineers, lawyers, among other specialties. “We need to understand smart cities within a multidisciplinary view, as they are complex systems, in which resilience is an important attribute”, that is, they resist changes.        
 
Digital inclusion - In addition to highlighting that Brazilian municipalities are advancing in the implementation of fiber optic networks, fundamental for digital inclusion and the construction of smart cities, Américo Tristão Bernardes, Director of Digital Inclusion (MCTIC) and, even large cities like São Paulo, have regions with failures in connectivity coverage. In its assessment, the country needs to promote the sharing of network infrastructure, carry out a clearer analysis of infrastructure risks and ensure interoperability between so many devices and systems in smart cities, as standards that will guarantee this integrated operation are still lacking, without the risk of technological entrapment.

Combat vulnerabilities - Roberto Gallo, Coordinator of the Cybersecurity Committee at ABES and CEO of Kryptus, stressed that the devices used in smart city projects present many vulnerabilities, requiring the market to evolve to the concept of "ssafety by design ”, that is, reducing the vulnerabilities still in the code steps of the programs. “Taking out insurance is no longer a cost. It is to do better and not have to spend much more to correct, when the system is already in operation and fails ” He cited as an example, a security test on the web, which he carried out in his company, through which he discovered vulnerabilities in more than 22 thousand cameras of a certain model, all in use in Brazil, connected and susceptible to hacking.