Technological advances have enabled multiple countries to consider implementing Smart City Infrastructure to provide in-depth insights into different data points and enhance the lives of citizens. Unfortunately, these new technological implementations also entice adversaries and cybercriminals to execute cyber-attacks and commit criminal acts on these modern infrastructures. Given the borderless nature of cyber attacks, varying levels of understanding of smart city infrastructure and ongoing investigation workloads, law enforcement agencies and investigators would be hard-pressed to respond to these kinds of cybercrime. Without an investigative capability by investigators, these smart infrastructures could become new targets favored by cybercriminals. To address the challenges faced by investigators, we propose a common definition of smart city infrastructure. Based on the definition, we utilize the STRIDE threat modeling methodology and the Microsoft Threat Modeling Tool to identify threats present in the infrastructure and create a threat model which can be further customized or extended by interested parties. Next, we map offences, possible evidence sources and types of threats identified to help investigators understand what crimes could have been committed and what evidence would be required in their investigation work. Finally, noting that Smart City Infrastructure investigations would be a global multi-faceted challenge, we discuss technical and legal opportunities in digital forensics on Smart City Infrastructure.
翻译:技术进步使许多国家考虑实施智慧城市基础设施,以提供多个数据点的深入洞察和增强公民的生活。不幸的是,这些新技术实施也吸引了对手和网络犯罪分子对这些现代基础设施进行网络攻击和犯罪行为。由于网络攻击的无国界性、智慧城市基础设施的各种理解程度和正在进行的调查工作量,执法机构和调查人员难以应对这些种类的网络犯罪。如果调查人员没有调查能力,这些智能化基础设施可能会成为网络犯罪分子的新目标。为了解决调查人员面临的挑战,我们提出了智慧城市基础设施的公共定义。根据该定义,我们使用STRIDE威胁建模方法和Microsoft威胁建模工具,识别基础设施中存在的威胁,并创建一个威胁模型,以供感兴趣的各方进一步定制或扩展。接下来,我们将犯罪行为、可能的证据来源和威胁类型映射起来,以帮助调查人员了解可能已经被犯下的犯罪行为以及在他们的调查工作中需要的证据。最后,注意到智慧城市基础设施调查将是一个全球多方面的挑战,我们讨论了数字取证在智慧城市基础设施领域的技术和法律机会。