A threat analysis framework for cyberattacks in smart cities: ransomware in focus

Smart cities heavily depend on data collection from Internet of Things (IoT) sensor devices embedded in different smart systems. However, such extensive data collection and sensor implantation have raised severe concerns among citizens. This very interconnected setting might jeopardize the privacy, security, and safety of people, as there is a sense of surveillance. These interconnected systems have also attracted significant attention from cybercriminals. This is because if they hack one system, they can cascade the effect to other interconnected systems. Using interdependent systems, they could easily disrupt critical infrastructure and services by launching cyberattacks. Among all cyberattacks, ransomware attacks have become a growing concern for smart city stakeholders due to their increased numbers. Therefore, it is essential to understand the ransomware threat in smart cities and develop effective strategies to prevent and mitigate such attacks. To this end, this chapter designs a threat modeling framework to analyze and understand ransomware attacks in smart cities. It takes a smart water management system as an example to demonstrate the susceptibility to ransomware attacks and touch on broader cybersecurity issues in a smart city environment. The framework intends to provide relevant stakeholders with a comprehensive awareness of the evolving threat landscape in modern industrial developments.