从以ANT为中心的角度理解智慧城市领域的安全性
Understanding Security in Smart City Domains From the ANT-centric Perspective
摘要:
城市是为居住在那里的人们服务的大型人类住区,而智慧城市是一个城市如何通过新形式的技术更好地为居民服务的概念。在本文中,我们根据马斯洛的需求层次,重点关注四个主要的智慧城市领域:智能公用事业,智能交通,灵巧家庭和智能医疗保健。许多物联网应用程序已经开发出来,以实现我们在智能领域所期望的智能,从健康追踪器和智能手表等个人设备到核和能源管理系统等大规模工业物联网系统。然而,许多现有的智慧城市物联网解决方案可以通过考虑其安全策略的适用性来改进。不适当的系统安全设计通常发生在两种情况下:第一,系统设计人员认识到安全的重要性,但不确定在何处,何时或如何实施它;第二,系统设计人员试图使传统的安全设计符合智慧城市的安全环境。因此,本文的目的是为应用程序设计人员提供他们可能需要改进其安全设计的缺失的安全环节。通过评估每个智慧城市领域的特定背景和特定背景的安全要求,我们的目标是为他们提供何时、何地以及如何实施安全战略的指导,以及他们需要考虑的可能的安全挑战。此外,我们从以数据为中心的角度,通过参考参考架构,以活动网络物联网(ANT)为中心的架构,提出了一个新的视角来看待智慧城市中的安全问题,该架构建立在“零信任环境中的安全”的概念基础上。通过这样做,我们减少了新系统交互或意外用户行为带来的安全风险,同时避免了定期升级安全模型的麻烦。
英文摘要:
A city is a large human settlement that serves the people who live there, and a smart city is a concept of how cities might better serve their residents through new forms of technology. In this paper, we focus on four major smart city domains according to Maslow's hierarchy of needs: smart utility, smart transportation, smart homes, and smart healthcare. Numerous IoT applications have been developed to achieve the intelligence that we desire in our smart domains, ranging from personal gadgets such as health trackers and smart watches to large-scale industrial IoT systems such as nuclear and energy management systems. However, many of the existing smart city IoT solutions can be made better by considering the suitability of their security strategies. Inappropriate system security designs generally occur in two scenarios: first, system designers recognize the importance of security but are unsure of where, when, or how to implement it; and second, system designers try to fit traditional security designs to meet the smart city security context. Thus, the objective of this paper is to provide application designers with the missing security link they may need to improve their security designs. By evaluating the specific context of each smart city domain and the context-specific security requirements, we aim to provide directions on when, where, and how they should implement security strategies and the possible security challenges they need to consider. In addition, we present a new perspective on security issues in smart cities from a data-centric viewpoint by referring to the reference architecture, the Activity-Network-Things (ANT)-centric architecture, built upon the concept of "security in a zero-trust environment". By doing so, we reduce the security risks posed by new system interactions or unanticipated user behaviors while avoiding the hassle of regularly upgrading security models.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。