Обзор угроз информационной безопасности в экосистеме умного города и их минимализации

Overview of information security threats in the smart city ecosystem and their minimization

This scientific review analyzes information security threats within the smart city ecosystem, with a specific focus on the context of the Russian Federation. Smart cities, characterized by the deep integration of digital technologies like the Internet of Things (IoT), big data, and cloud services into urban infrastructure, significantly enhance management efficiency and citizen quality of life. However, this digital transformation introduces severe cybersecurity vulnerabilities that can disrupt critical services such as energy, water supply, and public safety systems and endanger residents. The article systematically examines the technical threats targeting key components, including vulnerable IoT devices, industrial control systems (ICS), communication networks, and city data platforms. It further provides contemporary Russian case studies, such as unauthorized access to Moscow surveillance cameras and cyberattacks on utility companies, to illustrate real-world risks and consequences. In response, the work explores a dual approach to risk minimization. It reviews essential technical measures like network segmentation, encryption, and continuous monitoring. Simultaneously, it outlines the evolving Russian regulatory framework, including laws on Critical Information Infrastructure (CII) security and mandates for import substitution in cybersecurity solutions. The conclusion emphasizes that ensuring a resilient smart city requires a proactive, comprehensive strategy that integrates advanced technological protections with strict adherence to and development of national regulatory standards.