Cyber ​​security is the root of smart city construction

At the just-concluded 2015 “**”, legislation on information security, including personal information and network security, was once again presented by numerous national representatives and CPPCC members attending the meeting, in the national network information security, personal information security. In terms of protection, etc., there are calls for promoting legislation. National ** representatives and CPPCC members called for ensuring information security through the establishment of sound laws and regulations, and the 2015 government work report clearly stated that a unified national social credit code system and credit information sharing platform should be established to protect enterprises and individuals according to law. Information security. At the same time, the Third Session of the 12th National Committee of the CPPCC National Committee also announced that the Cyber ​​Security Law has been included in the relevant legislative plan.

Many of these representatives and members are themselves industry experts, scholars, or government officials engaged in information-related work. This shows that the entire industry has realized the importance of information security and has given it great importance. Smart city construction is supported by big data technology systems such as the Internet of Things and cloud computing. Data and information are huge, and it involves all aspects of government affairs, business, and life. Once there are security problems such as information leakage and data loss, the consequences will be disastrous. Therefore, the information security of smart cities cannot be ignored. In recent years, China's smart city construction practice, information security as an important part of the overall planning and top-level design, has not been ignored, the smart city planning and design of most provinces and cities have established a comprehensive system, in the information security It also has a relatively complete planning and design.

Due to the special nature of cyberspace, it is determined that information security will be an arduous task that accompanies informatization construction from beginning to end. A comprehensive information security system consists of network information system security assessment, risk assessment and technical services, information security certification, and information security management. Only through meticulous top-level design and sound infrastructure, and starting from the two aspects of technology and management, this information security system is the cornerstone of smart cities and the healthy advancement of our country's comprehensive informationization process.

In some of the smart city construction practices that the author participated in, the issues at the planning and design level are solved, and the problems in management and technology are often very obvious. Recently, the author of the Shanghai Internet Software Co., Ltd. in the development and construction of an information security system for a large park management company found that customers in the information security management, in terms of ideas and business practices, there are still many blind spots and dead ends. For example, when discussing data security, customers are most concerned about encryption, external attack prevention and other technical means. However, operations and management systems for sound IT equipment and equipment rooms are still at a very early stage. The safety and security of facilities and equipment are also guaranteed. Only knowing that it is necessary to guarantee the security of power supply, there are only vague concepts for the security and real-time monitoring of key facilities such as waterproof and windproof, as well as the engine room. It requires technology suppliers to provide very detailed solutions.

In fact, due to the rapid development of emerging technologies such as the Internet of Things and cloud computing, the corresponding information security assurance technology has not yet reached a very mature level. There are still many relatively fragile issues in the construction of smart cities. For example, for smart cities, the highly shared nature of cloud data resources makes the cloud platform vulnerable to data loss, IP and identity theft, financial fraud, and theft under the influence of malicious software. Another example is distributed denial of service attacks (DDoS) that also have the potential to quickly destroy the entire cloud infrastructure, and when the cloud platform is attacked, all related accounts will also be involved, resulting in incalculable losses to users of the platform services. The typical case is the 2010 Stuxnet, which infected more than 45,000 networks worldwide and brought tremendous commotion and damage to the power sector in various countries.

At present, the smart city construction technology providers are constantly emphasizing prior encryption, security monitoring and other means to strengthen the security guarantees for cloud services, but the information infrastructure security assurance system still needs to be gradually improved through long-term application and development. The strengthening of management measures is a very important part of this safeguard system. Through the optimization of management methods and improving the management level, it is also the best way to reinforce short boards when technical means are ineffective. Establishing a rational and effective security organizational structure, equipping and setting up responsible persons, positions, and institutions for security decision-making, management, implementation, and supervision, and clarifying roles and responsibilities are methods that are easier to implement than technical means and are urgently needed to establish management. means. In addition, the establishment of an information security evaluation and protection system and the enhancement of information security emergency handling capabilities are all aspects of management that need to be improved.

Of course, on the other hand, technical means also have the same important role. Smart city construction uses a variety of new IT techniques. The rapid development of these technologies is often far beyond the imagination of policy makers and builders, making information security often lag behind technological development. This requires us to fully consider the technology's forward-lookingness in planning and designing and constructing, and leave enough room for the entire smart city system to be upgraded and expanded.

In the smart city information core technology, China has begun to gradually get rid of the "IOE" that was created by industry giants such as IBM, Oracle, and EMC in the smart city construction field, especially the business information system, database management, and business solution market. Dependence diseases, including domestic companies such as “BAT”, Lenovo, and Inspur, have slowly come up in this area and have occupied a place in the domestic smart city construction market. However, on the basis of core technologies, the information security technology at the application layer is still slightly insufficient. In the fields of information terminals, data monitoring, device monitoring, and storage security, the pace of technological innovation is still far from the rapid development of core technologies.

In the information security system of the large-scale park management company mentioned in the previous section, Shanghai Internet Software Co., Ltd. has continued for more than two years in the planning and construction period of information security monitoring software, starting from the initial terminal monitoring and application software. The application software is upgraded and updated, continuously cooperates with the application of new technologies and new equipment for technological innovation, and forms a series of information security monitoring application software with 724 server cloud monitoring platform products as the core. However, even in this case, in the application practice of customers and the discussion with the industry, the author still finds that there are some application points where information security needs to be improved and strengthened. This also shows that on the technical level, information security construction will It is a long-term process with the advancement of smart city construction.

As a new generation of urban life, how far a smart city can go depends on how far information security goes. Smart cities have built a beautiful blueprint for people. However, in the process of building smart cities, we must attach great importance to information security. Only by establishing a complete information security guarantee system, we can effectively guarantee the security of all kinds of information and data and build a safe and reliable system. A smart city can truly build a smart city better.