Smart cities are an attractive target for criminals and cyber threat actors to exploit vulnerable systems to steal critical infrastructure data and sensitive information, conduct ransomware operations, or launch destructive cyberattacks.
Smart cities may create safer, more efficient, more resilient communities through technological innovation and data-driven decision-making, which ultimately can improve many aspects of quality of living for citizens and visitors.
However, this opportunity also introduces potential vulnerabilities that, if exploited, could impact national security, economic security, public health and safety, and critical infrastructure operations.
We explore some of the more common potential risks for travellers visiting smart cities, to better improve awareness around this global issue, and ensure that as a provider you can better answer any questions on this topic during your consultations.
This is crucial, considering that organised cybercrime is on the rise on a global scale, and many businesses and organisations are putting cybersecurity best practices at the forefront of their concerns.
Discover more about the most common cyber-attacks and what forms they can take here!
And how is this linked to tourist safety in-destination?
Well, first thing’s first, there’s not a one-size-fits-all definition or determining factor that makes one city ‘smart’ over the other. So a smart city can be defined or identified more by how ‘mature’ the technology is, or the infrastructure – a more developed and longer-standing integration of technology into a certain part of the cities’ make up would be a better determining factor, for example, than a newly implemented scheme that has just taken off.
So when thinking about what makes a smart city, this can refer to communities or settled areas that:
That travellers and agents should be aware of!
Not all of these risks are specific to smart cities, as there are cybersecurity risks no matter where you are given the increasing integration of technology in our daily lives, but there are certainly some risks that need to be taken into consideration when travelling to destinations that are renowned for their use of technology and how this may potentially impact a travellers’ experience while in-destination.
Smart cities collect large amounts of sensitive data, such as traffic flow, waste management, and facial recognition. This data can be used for identity theft, ransomware, and device hijacking.
Certain countries may actively monitor and/or intercept digital communications made by travellers. This can include emails, messages, or any data which is sent via the internet.
Smart city public safety systems that use AI-powered surveillance technologies may be susceptible to hacking, leading to privacy breaches.
When it comes to the process that travellers can take if they do think their privacy has been breached while abroad, here are a few steps that can be taken:
Smart cities are often seeking efficiency and achieve this by automating operations which would previously have been manual – one prime example is wastewater management, or traffic control systems.
Of course, connecting more previously separate components of any system increases the potential ‘weak spots’ in that system, and the same rings true within smart cities.
Integrating a larger number of previously separate infrastructure systems into a single network, or single digital environment, means that the potential ‘attack surface’ is bigger. Meaning, cybercriminals have more opportunities to infiltrate this system – more weak points to exploit – and more chances to move across the whole network from one connection to the next. The result can sometimes be huge disruptions across whole sectors or operations across the city.
This is called a ‘disruption of services’ and when cyberattacks of this type happen, they usually involve critical services like traffic lights, power grids, and water management systems.
For example, cybercriminals may be able to access a local government's Internet of Things sensor network, and from there they can move laterally to getting access to the emergency alert systems if these two systems are interconnected.
Or, a cybercriminal could use a distributed denial of services (DDoS) to access and overtake the parking meters within a city, if these are an Internet of Things (IoT) device, rendering them unusable, and then use this system to overtake another system within the city.
As well as impacting your clients’ experience in-destination, this can lead to more potentially harmful circumstances which can include the compromise of sensitive data, public facilities, or even issuing city-wide alerts which can put citizens and visitors at risk.
If travellers are connecting to unfamiliar networks, then they may be more susceptible to malware and spyware being installed without their notice. Devices can be remotely accessed via public networks, and can result in malicious software being installed which can monitor activities, access personal data or damage the device’s system.
Here are some recommendations you can provide to travellers for when they’re in-destination:
In the same thread as ensuring that travellers are aware of the risks of malicious software, the same consideration needs to be given to unsecure networks.
Given the prevalence of the Internet of Things (IoT) in so many cities around the world, and the resulting increase in unsecure networks that users can connect to, it’s important that travellers are aware of the risks.
Public Wi-Fi networks, particularly those offered in hotels, cafes and airports, can be considered hotspots for cyber criminals. Data which is sent/transmitted via these networks can be more easily intercepted and can be potentially used to access sensitive information.
Should a traveller not have a SIM card that allows for data roaming or pay-as-you-go data for worldwide destinations, then sometimes using public WiFi is the only choice. In these cases, travellers should use these networks sparingly, turning off their devices ‘auto-join’ function, and avoiding using public WiFi to make transactions.
Within a smart city, instances of software or hardware components being hacked within these interconnected are more common than in a community wherein this infrastructure is as connected.
This is often because of reliance on a third-party vendor to provide and integrate, these hardware and software elements, that connect previously separate systems.
This leaves these very same components vulnerable to attack as a result of this supply chain – either intentionally developed by cybercriminals who may have access to this chain, or through poor security practices.
This leaves people visiting or inhabiting these communities more vulnerable to:
If a system were compromised, cybercriminals could disrupt or break down city infrastructure, compromise or steal sensitive data from emergency service communications, surveillance technology, or even utility networks used to provide and monitor gas, water, grid, or lighting.
If travellers have a firm idea of what they want to do in-destination – or even if they’re open to suggestions – then pre-departure booking is ideal!
Not only can you ensure that you’re giving your customer an enhanced experience by booking their experiences in one go, but you’re also able to maximise your revenue during your consultation or booking process.
This is where Bedsonline comes in.
With an expansive global portfolio of accommodation options, in-destination activities, tours and local experiences, as well as global transfer coverage and car hire, you’re in the perfect position to offer your clients the end-to-end experience they want, and deserve.
Booking your clients’ experiences alongside their accommodation also means that they won’t have to make these purchases in-destination, which mitigates the risk of becoming vulnerable to data interception while making payments for experiences online during their stay.
With Bedsonline, you can choose from:
And more!
Discover more about the Bedsonline Booking Engine and our global portfolio here:
When it comes to your clients’ personal devices, here are a few tips that you can offer to travellers for them to put into action upon their return:
Discover more about the most common cyber-attacks here!
Many smart cities regularly test for any security vulnerabilities on a regular basis, to help identify and resolve any potential weaknesses, including: routine system audits, threat modelling techniques to ascertain any risks in mock-environments, the installation and use of intrusion detection and prevention systems, all of which help spot suspicious activity.
Though cybercrime is a risk for many all over the world, heading to destinations where infrastructure is more interconnected can pose an increased number of different risks.
Mitigating instances where travellers need to transfer any personal information, such as payments, is one way of easily reducing the risks for travellers, specifically when it comes to making payments online in-destination.
Do this by booking any of their in-destination experiences prior to their departure with Bedsonline, and offer your travellers peace of mind while simultaneously increasing your revenue opportunities.
Subscribe to Travel Advisor
our newsletter with tips for travel agents
