№2, 2024

SMART SOCIO-TECHNOLOGICAL INFRASTRUCTURES: CYBER SECURITY RISKS AND THE HUMAN FACTOR
Rasmiyya Mahmudova

Smart socio-technological infrastructure is a new approach to the design and creation of complex systems, based on the integration of technological and social elements. Currently, smart socio-technological infrastructures are applied in all spheres of life, from business and industry to healthcare and medical facilities. The implementation of these infrastructures creates new opportunities for the development of various fields. However, it causes a number of problems. The reasons for new information security problems arising from the characteristics of smart socio-technological infrastructures may include the increase in the number of devices (the number of devices interacting with each other increases, which expands the potential attack plane), the complexity of integration (the integration of social and technological components leads to the creation of new vulnerabilities), data heterogeneity (where the processing and storage of various types of information, including confidential information, make them an attractive target for cybercriminals), the dynamism of the environment (smart socio-technological infrastructures are constantly evolving and adapting, which makes it difficult to ensure their security). This article examines information security problems of smart socio-technological infrastructures. New threats arising from the introduction of these infrastructures are classified. The development of information security culture is justified as one of the main factors of combating these threats, and recommendations are given on the principles and methods of its formation (pp.49-60). 

Keywords:Socio-technical infrastrukture, Smart city, Cybersecurity problems, Smart infrastructure, Smart sitizen, Information security culture, Human factor
References

Acquisti A., Grossklags J. (2005). “Privacy and rationality in individual decision making”, IEEE Secur. Privacy, vol. 3, no. 1, pp. 26-33.

Alakbarova İ. (2023). Development of a model for the analysis of human behavior in a smart home environment. Problems of Information Society, 14(1), 75-84.

Alguliyev, R., & Mahmudov, R. (2022). Formation of Cyber-Physical Systems in Azerbaijan and Some Topical Problems of Their Complex Security. In Cybersecurity for Critical Infrastructure Protection via Reflection of Industrial Control Systems (pp. 81-89). IOS Press.

Alharbi, Talal, and Asifa Tassaddiq. (2021). "Assessing Cybersecurity Awareness Among Majmaa University Students." Big Data and Cognitive Computing 5, no. 2: 23. doi:10.3390/bdcc5020023. (in Russian)

Annaswamy A., Ahmadpour A., Baros S. (2016). Emerging research topics in control for smart infrastructures. Annual reviews in Control, Volume 42, p. 259-270. doi:10.1016/j.arcontrol.2016.10.001

Avast, (2019). Avast smart home security report.

Baker, A. B., Hutchinson, R. L., Eagan, R. J., Moonka, A. K., Falcone, P. K., Swinson, M. L., ... & Hines, W. C. (2002). A scalable systems approach for critical infrastructure security (No. SAND2002-0877). Sandia National Lab.(SNL-NM), Albuquerque, NM (United States); Sandia National Lab.(SNL-CA), Livermore, CA (United States).

Bringhenti D., Valenza F., Basile C. (2022). Toward cybersecurity personalization in smart homes. IEEE Secur. Privacy, 20 (1), pp. 45-53, doi:10.1109/MSEC.2021.3117471

Bulletin of Tomsk State University. (2021). No. 468. P. 243–252. DOI: 10.17223/15617793/468/28 UDC 343.3/.7 L.R. Klebanov, S.V. Polubinskaya DIGITAL HEALTHCARE, THE COVID-19 PANDEMIC, AND CYBERSECURITY PROBLEMS. (in Russian)

Buyannemekh B, Gasco-Hernandez M, Gil-Garcia JR. (2022). Fostering Smart Citizens: The Role of Public Libraries in Smart City Development. Sustainability, 16(5):1750. doi:10.3390/su16051750

Harrison C., B. Eckman, R. Hamilton, P. Hartswick, J. Kalagnanam, J. Paraszczak, P. Williams. (2010). Foundations for smarter cities IBM Journal of Research and Development, pp.1-16.

de Bruijn, H., & Janssen, M. (2017). Building cybersecurity awareness: The need for evidence-based framing strategies. Government Information Quarterly, 34, 1-7.

doi: 10.26583/bit.2021.4.01

Elmaghraby A.S., Losavio M.M. (2014). Cyber security challenges in Smart Cities: Safety, security and privacy J. Adv. Res., 5 (4), pp. 491-497.

Frank, E., & Fernandez-Montesinos, ´ G. A. (2020). Smart city= smart citizen= smart economy?: An economic perspective of smart cities. Social, Legal, and Ethical Implications of IoT, Cloud, and Edge Computing Technologies, 161–180.

Guhr N., Werth O., Blacha P.P.H., Breitner M.H. (2020). Privacy concerns in the smart home context SN Appl. Sci., 2, pp. 2523-3971. doi: 10.1007/s42452-020-2025-8.

Habibzadeh, H., Nussbaum, B. H., Anjomshoa, F., Kantarci, B., & Soyata, T. (2019). A survey on cybersecurity, data privacy, and policy issues in cyber-physical system deployments in smart cities. Sustainable Cities and Society, 50, 101660.

Hoult N, Bennett PJ, Stoianov I et al. (2009). Wireless sensor networks: creating ‘smart infrastructure’. Proceedings of the Institution of Civil Engineers – Civil Engineering 162(3): 136–143, doi:10.1680/cien.2009.162.3.136 

Kaspersky daily. https://www.kaspersky.ru/blog/how-to-secure-smart-home/34849/

Kitchin, R., & Dodge, M. (2019). The (In) Security of Smart Cities: Vulnerabilities, Risks, Mitigation, and Prevention. Journal of Urban Technology, 26(2), 47–65. doi:10.1080/10630732.2017.1408002

Kuznetsov S.A. (2000). The Large Explanatory Dictionary of the Russian Language / (ed.). - SPb.: Norint, 2000. — С. 397. — ISBN 5-7711-0015-3. (in Russian)

Lowry, P.B.; Dinev, T.; Willison, R. (2017). Why security and privacy research lies at the centre of the information systems (IS) artefact: Proposing a bold research agenda. Eur. J. Inf. Syst. 26, p.546–563.

Mahmudova R. (2021). On some aspects of the culture of information security of an individual and society, Problems of information society, 12(1), 56-66. doi:10.25045/jpis.v12.i1.05.

Mahmudova R. (2022). Analysis of international experience in the formation of a culture of information security in society, Problems of Information Society, 13(1), 75–82. doi:10.25045/jpis.v13.i1.10.

Mahmudova R. (2023). "Cyber-physical Systems: Security Problems and Issues of Personnel Information Security Culture", International Journal of Education and Management Engineering (IJEME), 13(2), 18-26. doi:10.5815/ijeme.2023.02.03.    

Mahmudova R. (2024). Voprosi razvitiya chifrovix kompetenciy specialistov dlya Industry 4.0 /Informacionnoye obshestvo, 1, p. 61-70. doi: 10.52605/16059921_2024_01_61.

Malyuk, A.A., Malyuk, Z. P. (2021). Topical issues of creating a mass education system for information security culture. IT Security (Russia), 28(4), 6–21. ISSN 2074-7136.

Morimoto R. (2013). A socio-economic analysis of Smart Infrastructure sensor technology. Transportation Research Part C: Emerging Technologies 31: 18–29. doi:10.1016/j.trc.2013.02.015.

Ogie, R. I., Perez, P., & Dignum, V. (2017). Smart infrastructure: an emerging frontier for multidisciplinary research. Proceedings of the Institution of Civil Engineers - Smart Infrastructure and Construction, 170(1), 8–16.  doi:10.1680/jsmic.16.00002.

Razaque A. et al. (2019). “Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain," in IEEE Access, vol. 7, pp. 168774-168797.

Sharma, S., Tripathi, M.M. and Mishra, V.M. (2017), “Survey paper on sensors for body area network in health care”, The IEEE International Conference in Emerging Trends in Computing and Communication Technologies (ICETCCT).

Stepanova I.A., Stepanov A.S. (2020). Review of waste collection and disposal systems in anthropogenic ecosystems, Samara Scientific Bulletin, v.9, no. 2(31), p. 121-131. (in Russian)

UN ECOSOC: Report on Smart cities and infrastructure (2016),
https://unctad.org/system/files/official-document/ecn162016d2_en.pdf

Vasilenko L.A. (2021). Digital breakthrough: will public administration be smart enough in a digital state and how smart are the elite and citizens. Digital sociology, vol. 4, no. 3, pp. 6–15. doi: 10.26425/2658-347X-2021-4-3-6-15).

Venkatasubramanian KK, Mukherjee T and Gupta SK. (2014).  CAAC – an adaptive and proactive access control approach for emergencies in smart infrastructures. ACM Transactions on Autonomous and Adaptive Systems (TAAS) 8(4): 1–20.

Verizon Data Breach Report (2023). https://www.verizon.com/about/news/2023-data-breach-investigations-report

Weiss A. (2009). Smart infrastructure matches supply and demand. Networker 13(3): 18–25.

World Economic Forum. (2012). Strategic Infrastructure Steps to Prioritize and Deliver Infrastructure Effectively and Efficiently. Geneva.

Zaheer Khan, Zeeshan Pervez, Abdul Ghafoor Abbasi. (2017).  Towards a secure service provisioning framework in a Smart city environment, Future Generation Computer Systems, Volume 77, p. 112-135, ISSN 0167-739X, doi10.1016/j.future.2017.06.031

Zeadally, S., Siddiqui, F., Baig, Z. and Ibrahim, A. (2020). "Smart healthcare: Challenges and potential solutions using internet of things (IoT) and big data analytics", PSU Research Review, Vol. 4 No. 2, pp. 149-168. doi:10.1108/PRR-08-2019-0027

Zobova L. L. (2016). The problem of describing geospaces: modern technologies // Bulletin of the Kemerovo State University. Series: Political, sociological and economic sciences. No. 1. p. 51 – 55. (in Russian)