CYBERSECURITY RISKS IN SMART STREET LIGHTING SYSTEMS: FROM IoT EFFICIENCY TO CRITICAL INFRASTRUCTURE PROTECTION
Annotatsiya
Smart street lighting integrates energy-efficient illumination with networked sensing, cloud services, remote control, and automated decision-making. While this improves operational efficiency, it also transforms conventional lighting assets into cyber-physical components of urban infrastructure. This study evaluates cybersecurity risks in a low-cost smart street lighting architecture based on an ESP32-class controller, motion and ambient-light sensors, Wi-Fi connectivity, a Firebase-style cloud backend, and a web dashboard. The assessment combines architecture decomposition, asset and trust-boundary identification, STRIDE threat modeling, and threat-to-control mapping. Six principal threat categories are identified: spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. The analysis shows that hardcoded credentials, insecure provisioning, misconfigured cloud rules, sensor spoofing, firmware compromise, unauthorized remote control, botnet recruitment, and lateral movement can cause consequences ranging from energy waste and loss of system availability to disruption of public safety.
Maqolani onlayn o'qish
##submission.citations##
- [1] ENISA. “Guidelines for Securing the Internet of Things.”
- [2] IEEE Standards Association. “Internet of Things (IoT) Security Best Practices Whitepaper.”
- [3] Espressif Systems. “ESP-IDF Security Overview.”
- [4] Espressif Systems. “Secure Boot v2 — ESP32.”
- [5] Google Firebase Documentation. “Understand Firebase Realtime Database Security Rules.”
- [6] Google Firebase Documentation. “Avoid insecure rules.”
- [7] Acunetix. “Firebase database accessible without authentication.”
- [8] “Spoofing Attack on Ultrasonic Distance Sensors Using a Continuous Signal.” PubMed Central.
- [9] CISA. “Cybersecurity Best Practices for Smart Cities.”
- [10] CERT-In. “Cyber Security Guidelines for Smart City Infrastructure.”
- [11] Pacific Northwest National Laboratory. “A Cybersecurity Threat Profile for a Connected Lighting System.”
- [12] U.S. Department of Energy. “Cyber Security for Lighting Systems.”
- [13] Stormshield. “The Smart City and Cybersecurity: The Issue of Public Lighting.”
- [14] NIST. “Cyber-Physical Systems/Internet of Things for Smart Cities.”
- [15] NIST. “Smart City Framework.”
- [16] NIST. “Implementing a Zero Trust Architecture Project.”
- [17] NIST CSRC. “Zero Trust Architecture and Defense in Depth.”
- [18] TechScience. “Design the IoT Botnet Defense Process for Cybersecurity in Smart City.”
- [19] Rambus. “Smart Cities: Threats and Countermeasures.”