Wi-Fi is the largest attack surface and the most vulnerable attack surface of smart cities. Wi-Fi access and metro Wi-Fi networks are key assets for smart cities.

1. C&T RF Antennas Inc
www.ctrfantennas.com rfproducts1@ctrfantennas.com
Please Contact us for more information, thank you.
 Jasmine Lu (86)17322110281
Four key points for smart city public WiFi security
Wi-Fi is the largest attack surface and the most vulnerable attack surface of smart cities. Wi-Fi
access and metro Wi-Fi networks are key assets for smart cities.
Wi-Fi access and metro Wi-Fi networks are key assets for smart cities.
However, the availability of public Wi-Fi networks comes at a price, because public Wi-Fi
networks are vulnerable to cyber-attacks. Cybersecurity company Norton sees free public Wi-Fi
as "a playground for hackers to steal personal information." Free Wi-Fi, whether provided by
Starbucks or City Hall, is the target of hackers.
Only the combination of strong encryption and security hardening practices can significantly
improve the security of citizens and tourists using public Wi-Fi networks.
Ted Wagner, vice president, and chief information security officer of SAP NS2, an SAP
cybersecurity subsidiary, states that as long as encryption is applied, even with weak encryption,
hackers will need to spend some resources to crack. Often times, it's bad implementation and
configuration that puts the city in trouble.
The government-enterprise partnership also helps cities use the power and expertise of
technology companies to help cities solve difficult technical problems and reduce operating and
maintenance costs.
Strong encryption is the starting point for a secure public Wi-Fi
With the spread of public Wi-Fi, more secure encryption methods have gradually attracted
people's attention. The Wireless Encryption Protocol (WEP), one of the earliest encryption
schemes to protect wireless networks, has proven to be insufficient to stop attackers. Wi-Fi
Protected Access (WPA) was designed to replace WEP, but hackers still found the loophole.
The current standard is WPA2, which utilizes the Advanced Encryption Standard (AES) in
combination with 802.11i.
This standard manages the encryption architecture together with the RADIUS server because the
RADIUS server uses a central database to verify the identity of remote users and is a stronger

2. C&T RF Antennas Inc
www.ctrfantennas.com rfproducts1@ctrfantennas.com
Please Contact us for more information, thank you.
 Jasmine Lu (86)17322110281
certificate distribution method than wireless access point distribution.
CIOs of smart cities also need to pay due diligence and double checks on their own systems to
ensure city Wi-Fi security.
I don't even trust myself in terms of security controls. I will introduce a third party to check.
Therefore, due diligence is important.
Wilfred Pinfold is the chair of the American Computer Society (ACM) Smart Cities Emerging
Interest Group and the CEO of Urban Systems. He said that urban Wi-Fi is easy to be hacked,
probably because the default password of the device has not been changed, or low-level errors
such as security updates and patches have not been installed.
There are many security blunders caused by things being left behind. There must be certain
procedures for setting up the infrastructure, and care must be taken. Any device on the network
should be treated this way.
Smashing the "rogue hotspots" in smart cities
Adding a forced authentication portal can help users distinguish whether they are visiting a city's
public Wi-Fi network or a normal website login page when they access a Wi-Fi network. For
example, Kansas City's public Wi-Fi system login page has both the city's logo and the city's
network partner Sprint's logo. According to Bob Bennett, former chief innovation officer at
Kansas City and director of the Cities Today Institute, users will know they are connected to the
correct network, not a malicious network.
However, Wagner believes that these pages are easy to clone and that hackers can insert code
into the website itself. A more effective measure is to include a more pure authentication process
on both ends.
802.1x adds an additional layer of user authentication security and establishes a tunnel between
the user and the access point. The above authentication can be achieved through 802.1x. PKI
certificates provide fully automated secure connections and can also be used by smart cities.
According to Pinfold, this is the most common public encryption mechanism. In this system,
X.509 PKI certificates uniquely identify end-users and devices.
Pinfold states that these encryption technologies "allow us to implement authentication simply
and seamlessly, and we should use them more."
Government-enterprise partnership fights public Wi-Fi security risks
From a talent perspective alone, cities that want to set up and operate their own public Wi-Fi
networks are often at a disadvantage. Many cities are often struggling to compete for top talent,
and it is difficult to secure the right resources and budget to upgrade.
So many cities are working with large tech companies. A study presented at this year's
International Conference on Theoretical and Practical Issues in E-Government Affairs shows that
public-private partnerships are the main business form of implementing and operating public
digital communication networks.
This is not just a matter of saving money; doing so puts the experts in a position responsible for
this cybersecurity, and professional issues are resolved by professionals.
When Kansas City provided public Wi-Fi across 54 blocks in the city center, the city established a
partnership with Sprint, which owns and operates the network. Sprint's security level is obviously
higher than in the public management field. This partnership is also attractive for tech companies

3. C&T RF Antennas Inc
www.ctrfantennas.com rfproducts1@ctrfantennas.com
Please Contact us for more information, thank you.
 Jasmine Lu (86)17322110281
because participating in Metro Wi-Fi can demonstrate their ability as a socially responsible
business.
5G Potential on Safe City Wi-Fi Networks
The Hotspot 2.0 protocol is an industry-recognized method for seamless Wi-Fi roaming. Although
Wagner considers such methods effective, he also said that the market is moving to 5G. The
latter has become a common topic for everyone at this year's Consumer Electronics Show.
Many people are looking forward to the 5G. 5G may usher in an opportunity to compete with
Wi-Fi.
Existing 5G infrastructures built using Verizon and AT & T are also considered by major cities.
Compared to traditional wireless services, the prospects for 5G are significantly broader.
Bennett said that the state governments in the United States have moved beyond 5G and are
looking to 6G and 7G, especially when cities are building networks and setting up the
infrastructure that can last 30 years.
Why public Wi-Fi is the focus of smart cities
Security risks are not a reason to completely abandon public Wi-Fi. Public Wi-Fi brings many
possibilities to smart cities and helps local economic development. According to the National
Cities Alliance, cities based on digital technology will have lower unemployment and poverty
levels. The average income level and per capita GDP of a city are related to the size of its Internet
industry.
Public Wi-Fi not only drives IoT devices that provide the data needed for better decision making
but is also seen by governments as a way to help cities and regions address infrastructure gaps
and help them respond to natural disasters. Public Wi-Fi networks can provide Internet access for
low-income people, and to some extent alleviate social problems that may be caused by income
inequality.
We don't want to leave a large number of people unable to access the Internet and unable to
take advantage of the technologies and functions brought by the Internet.
Creating public Wi-Fi is not just to allow rich children to upload social media photos in urban
areas, although this is still a trendy thing, but to enable most people without Internet access to
enjoy the Internet conveniently. With public Wi-Fi, kids in every household can stay home and do
their homework. This is a good thing.