journal article·2021-05-14Open access

Privacy and Security in Cognitive Cities: A Systematic Review

Juvenal Machin, Edgar Batista, Antoni Martínez-Ballesté, Agusti Solanas

Applied Sciences· Volume 11· Issue 10

Abstract

The emerging paradigm of the cognitive city, which augments smart cities with learning and behavioral change capabilities, is gaining increasing attention as a promising solution to the challenges of future mega-cities. Cognitive cities are built upon artificial learning and behavioral analysis techniques founded on the exploitation of human-machine collective intelligence. Hence, cognitive cities rely on the sharing of citizens’ daily-life data, which might be considered sensitive personal data. In this context, privacy and security of the shared information become critical issues that have to be addressed to guarantee the proper deployment of cognitive cities and the fundamental rights of people. This article provides a thorough literature review using the recommendations for systematic reviews proposed by Vom Brocke et al. and the PRISMA statement. We analyze peer-reviewed publications indexed in ACM Digital Library, IEEE Xplore, Scopus, and Web of Science until July 2020. We identify the main challenges on privacy and information security within cognitive cities, and the proposals described in the literature to address them. We conclude that many challenges remain open and we suggest several research lines that will require further examination in the years to come.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Privacy-Preserving Technologies in Data · Privacy, Security, and Data Protection · Blockchain Technology Applications and Security

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Computer Engineering and Mathematics, School of Engineering Avinguda dels Paisos Catalans, Universitat Rovira i Virgili, 26, 43007 Tarragona, Spain

Funding

Departament d'Innovació, Universitats i Empresa, Generalitat de Catalunya · Generalitat de Catalunya · Universitat Rovira i Virgili · Ministerio de Ciencia y Tecnología · European Commission · European Cooperation in Science and Technology

References (94)

Show source-provided references
1. Smart health: A context-aware health paradigm within smart cities10.1109/MCOM.2014.6871673 ↗
2. Hall, R.E., Bowerman, B., Braverman, J., Taylor, J., Todosow, H., and Von Wimmersperg, U. (2000). The Vision of a Smart City, Brookhaven National Lab.. Technical report.
3. Connectivism: A learning theory for the digital age
4. Cognitive Cities and Intelligent Urban Governance
5. Machin, J., and Solanas, A. (2018, January 23–25). A Review on the Meaning of Cognitive Cities. Proceedings of the 2018 9th International Conference on Information, Intelligence, Systems and Applications (IISA), Zakynthos, Greece.10.1109/IISA.2018.8633654 ↗
6. Ferrández Vicente, J.M., Álvarez-Sánchez, J.R., de la Paz López, F., Toledo Moreo, J., and Adeli, H. (2019). Conceptual Description of Nature-Inspired Cognitive Cities: Properties and Challenges. Bioinspired Systems and Biomedical Applications to Machine Learning, Springer International Publishing.10.1007/978-3-030-19651-6 ↗
7. Ashby, W.R. (1961). An Introduction to Cybernetics, Chapman & Hall Ltd.
8. Hundepool, A., Domingo-Ferrer, J., Franconi, L., Giessing, S., Nordholt, E.S., Spicer, K., and de Wolf, P.P. (2012). Statistical Disclosure Control, John Wiley & Sons.10.1002/9781118348239 ↗
9. Machin, J. (2016). Triangulation-Based Multivariate Microaggregation. [Master Thesis, Universitat Oberta de Catalunya].
10. Cheng, L., Liljestrand, H., Ahmed, M.S., Nyman, T., Jaeger, T., Asokan, N., and Yao, D. (2019, January 23–25). Exploitation Techniques and Defenses for Data-Oriented Attacks. Proceedings of the 2019 IEEE Cybersecurity Development (SecDev), Tysons Corner, VA, USA.10.1109/SecDev.2019.00022 ↗
11. Hern, A. (2021, May 12). Berlin artist uses 99 phones to trick Google into traffic jam alert. The Guardian. Available online: https://www.theguardian.com/technology/2020/feb/03/berlin-artist-uses-99-phones-trick-google-maps-traffic-jam-alert.
12. Smart cities: A survey on security concerns
13. Future challenges for smart cities: Cyber-security and digital forensics10.1016/j.diin.2017.06.015 ↗
14. Hamid, B., Jhanjhi, N., Humayun, M., Khan, A., and Alsayat, A. (2019, January 14–15). Cyber Security Issues and Challenges for Smart Cities: A survey. Proceedings of the 2019 13th International Conference on Mathematics, Actuarial Science, Computer Science and Statistics (MACS), Karachi, Pakistan.10.1109/MACS48846.2019.9024768 ↗
15. Ismagilova, E., Hughes, L., Rana, N.P., and Dwivedi, Y.K. (2020). Security, Privacy and Risks Within Smart Cities: Literature Review and Development of a Smart City Interaction Framework. Inf. Syst. Front., 1–22.10.1007/s10796-020-10044-1 ↗
16. Cyber Security for Smart Cities
17. The pursuit of citizens’ privacy: A privacy-aware smart city is possible10.1109/MCOM.2013.6525606 ↗
18. Privacy concerns in smart cities10.1016/j.giq.2016.06.004 ↗
19. Security and Privacy in Smart City Applications: Challenges and Solutions10.1109/MCOM.2017.1600267CM ↗
20. Privacy in the Smart City—Applications, Technologies, Challenges, and Solutions10.1109/COMST.2017.2748998 ↗
21. A survey of privacy enhancing technologies for smart cities10.1016/j.pmcj.2019.03.001 ↗
22. The security of machine learning10.1007/s10994-010-5188-5 ↗
23. A Survey on Security Threats and Defensive Techniques of Machine Learning: A Data Driven View10.1109/ACCESS.2018.2805680 ↗
24. Machine Learning Security: Threats, Countermeasures, and Evaluations10.1109/ACCESS.2020.2987435 ↗
25. Nelson, B., and Olovsson, T. (2016, January 5–8). Security and privacy for big data: A systematic literature review. Proceedings of the 2016 IEEE International Conference on Big Data (Big Data), Washington, DC, USA.10.1109/BigData.2016.7841037 ↗
26. Comprehensive Survey on Big Data Privacy Protection10.1109/ACCESS.2019.2962368 ↗
27. Technological, Organizational and Environmental Security and Privacy Issues of Big Data: A Literature Review10.1016/j.procs.2016.09.119 ↗
28. Aleisa, N., and Renaud, K. (2017, January 4–7). Privacy of the Internet of Things: A Systematic Literature Review. Proceedings of the 50th Hawaii International Conference on System Sciences (2017), Hilton Waikoloa Village, HI, USA.10.24251/HICSS.2017.717 ↗
29. Preserving privacy in internet of things: A survey
30. IoT security: Review, blockchain solutions, and open challenges10.1016/j.future.2017.11.022 ↗
31. Grover, J., and Sharma, M. (2014, January 11–13). Cloud computing and its security issues—A review. Proceedings of the Fifth International Conference on Computing, Communications and Networking Technologies (ICCCNT), Hefei, China.10.1109/ICCCNT.2014.6962991 ↗
32. Cloud computing and trust evaluation: A systematic literature review of the state-of-the-art mechanisms10.1016/j.jesit.2017.09.001 ↗
33. Security Issues in Fog Environment: A Systematic Literature Review10.1007/s10776-020-00491-7 ↗
34. O’Driscoll, C. (2008, January 13–16). Privacy in context: Privacy issues in Ubiquitous Computing applications. Proceedings of the 2008 Third International Conference on Digital Information Management, London, UK.10.1109/ICDIM.2008.4746842 ↗
35. A decade of security research in ubiquitous computing: Results of a systematic literature review10.1108/IJPCC-03-2016-0018 ↗
36. Human aspects of ubiquitous computing: A study addressing willingness to use it and privacy issues10.1007/s12652-016-0438-4 ↗
37. The PICO strategy for the research question construction and evidence search10.1590/S0104-11692007000300023 ↗
38. Vom Brocke, J., Simons, A., Niehaves, B., Riemer, K., Plattfaut, R., and Cleven, A. (2009, January 8–10). Reconstructing the giant: On the importance of rigour in documenting the literature search process. Proceedings of the 17th European Conference on Information Systems, ECIS 2009. Association for Information Systems, Verona, Italy.
39. Analyzing the Past to Prepare for the Future: Writing a Literature Review
40. Organizing knowledge syntheses: A taxonomy of literature reviews10.1007/BF03177550 ↗
41. International Organization for Standardization (2018). ISO/IEC 27000:2018(E): Information Technology—Security Techniques—Information Security Management Systems—Overview and Vocabulary (2018) Standard, International Organization for Standardization.
42. Understanding information assurance and security
43. Cherdantseva, Y., and Hilton, J. (2013). Information security and information assurance: Discussion about the meaning, scope, and goals. Organizational, Legal, and Technological Dimensions of Information System Administration, IGI Global.10.4018/978-1-4666-4526-4.ch010 ↗
44. Council of Europe/European Court of Human Rights (2019). Guide on Article 8 of the European Convention on Human Rights, European Court of Human Rights.
45. Preferred Reporting Items for Systematic Reviews and Meta-Analyses: The PRISMA Statement10.1371/journal.pmed.1000097 ↗
46. A conceptual model for intelligent urban governance: Influencing energy behaviour in cognitive cities10.1007/978-3-030-00317-3_8 ↗
47. Advancing cognitive cities with the web of things10.1007/978-3-319-58190-3_5 ↗
48. Morabito, V. (2015). Big Data and Analytics for Government Innovation. Big Data and Analytics: Strategic and Organizational Impacts, Springer International Publishing.10.1007/978-3-319-10665-6 ↗
49. Cognitive cities, big data and citizen participation: The essentials of privacy and security10.1007/978-3-319-33798-2_4 ↗
50. Enabling Cognitive Smart Cities Using Big Data and Machine Learning: Approaches and Challenges10.1109/MCOM.2018.1700298 ↗
51. Kaltenrieder, P., Portmann, E., and D’onofrio, S. (2015, January 8–10). Enhancing multidirectional communication for cognitive cities. Proceedings of the 2015 Second International Conference on eDemocracy eGovernment (ICEDEG), Quito, Ecuador.10.1109/ICEDEG.2015.7114476 ↗
52. From smart to cognitive: A roadmap for the adoption of technology in cities10.1007/978-3-319-33798-2_2 ↗
53. Kaltenrieder, P., Portmann, E., and Myrach, T. (2015, January 2–5). Fuzzy knowledge representation in cognitive cities. Proceedings of the IEEE International Conference on Fuzzy Systems, Istanbul, Turkey.10.1109/FUZZ-IEEE.2015.7337951 ↗
54. Bayuk, J.L., and Mostashari, A. (2011, January 2–3). Measuring cyber security in intelligent urban infrastructure systems. Proceedings of the 2011 8th International Conference and Expo on Emerging Technologies for a Smarter World, Hauppauge, NY, USA.10.1109/CEWIT.2011.6135873 ↗
55. Enabling smart cities through a cognitive management framework for the internet of things10.1109/MCOM.2013.6525602 ↗
56. Digital personal assistant for cognitive cities: A paper prototype10.1007/978-3-319-33798-2_6 ↗
57. Al-Turjman, F., and Houdjedj, A. (2019). Learning in Cities’ Cloud-Based IoT, CRC Press.10.1201/9780429319181-8 ↗
58. Using fuzzy cognitive maps to arouse learning processes in cities10.1007/978-3-030-00317-3_5 ↗
59. Machin, J., Batista, E., Martinez-Balleste, A., and Solanas, A. (2020). Dataset Privacy and Security in Cognitive Cities: A Systematic Review. Mendeley Data.10.3390/app11104471 ↗
60. Liu, Z., Cai, L., and Hu, Y. (2015, January 19–20). Research on software quality evaluation for application of smart city. Proceedings of the 2015 4th International Conference on Computer Science and Network Technology, Harbin, China.
61. A Coefficient of Agreement for Nominal Scales10.1177/001316446002000104 ↗
62. SmartData: Make the data “think” for itself
63. Duquennoy, S., Grimaud, G., and Vandewalle, J.J. (2009, January 25–27). The web of things: Interconnecting devices with high usability and performance. Proceedings of the 2009 International Conference on Embedded Software and Systems, Hangzhou, China.10.1109/ICESS.2009.13 ↗
64. Understanding trust in privacy-aware video surveillance systems10.1007/s10207-015-0286-9 ↗
65. Nakamoto, S. (2021, May 12). Bitcoin: A Peer-to-Peer Electronic Cash System. Available online: https://nakamotoinstitute.org/bitcoin/.
66. Applications of Blockchains in the Internet of Things: A Comprehensive Survey10.1109/COMST.2018.2886932 ↗
67. Quad 9 (2021, May 12). Quad9 Frequently Asked Questions. Available online: https://www.quad9.net/faq/#How_does_Quad9_protect_me_from_malicious_domains.
68. Machine Learning in IoT Security: Current Solutions and Future Challenges10.1109/COMST.2020.2986444 ↗
69. Song, L., Shokri, R., and Mittal, P. (2019). Privacy Risks of Securing Machine Learning Models against Adversarial Examples. CCS ’19, Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, London, UK, 11–15 November 2019, Association for Computing Machinery.10.1145/3319535.3354211 ↗
70. Selective audio adversarial example in evasion attack on speech recognition system10.1109/TIFS.2019.2925452 ↗
71. Acoustic-decoy: Detection of adversarial examples through audio modification on speech recognition system10.1016/j.neucom.2020.07.101 ↗
72. The vision of autonomic computing10.1109/MC.2003.1160055 ↗
73. An architectural blueprint for autonomic computing
74. Differential Privacy Techniques for Cyber Physical Systems: A Survey10.1109/COMST.2019.2944748 ↗
75. Differential Privacy
76. Macaulay, T. (2021, May 12). Someone Let a GPT-3 Bot Loose on Reddit—It Didn’t End Well. Available online: https://thenextweb.com/neural/2020/10/07/someone-let-a-gpt-3-bot-loose-on-reddit-it-didnt-end-well/amp/.
77. Huang, L., Joseph, A.D., Nelson, B., Rubinstein, B.I.P., and Tygar, J.D. (2011). Adversarial Machine Learning. AISec ’11, Proceedings of the 4th ACM Workshop on Security and Artificial Intelligence, Chicago, IL, USA, 21 October 2011, Association for Computing Machinery.10.1145/2046684.2046692 ↗
78. Modeling reverse thinking for machine learning10.1007/s00500-019-03980-x ↗
79. Decision making with the analytic hierarchy process
80. Internet Users’ Information Privacy Concerns (IUIPC): The Construct, the Scale, and a Causal Model10.1287/isre.1040.0032 ↗
81. Powers, B. (2021, May 12). Data Privacy as the New User Experience. Available online: https://martechseries.com/mts-insights/guest-authors/data-privacy-new-user-experience/.
82. Botching Human Factors in Cybersecurity in Business Organizations10.2478/hjbpa-2018-0024 ↗
83. Stress, appraisal and coping
84. Understanding Employee Responses to Stressful Information Security Requirements: A Coping Perspective10.2753/MIS0742-1222310210 ↗
85. Cognitive security: A comprehensive study of cognitive science in cybersecurity
86. Ponemon Institute LLC (2020). 2020 Cost of Insider Threat Global Report, Ponemon Institute. Technical report.
87. Human factors in information security: The insider threat—Who can you trust these days?10.1016/j.istr.2010.04.004 ↗
88. Sanction threats and appeals to morality: Testing a rational choice model of corporate crime10.2307/3054128 ↗
89. Cornish, D.B., and Clarke, R.V. (2017). The Reasoning Criminal: Rational Choice Perspectives on Offending, Routledge.
90. IS security policy violations: A rational choice perspective10.4018/joeuc.2012010102 ↗
91. Buldas, A., Laud, P., Priisalu, J., Saarepera, M., and Willemson, J. (2006). Rational choice of security measures via multi-parameter attack trees. International Workshop on Critical Information Infrastructures Security, Springer.10.1007/11962977_19 ↗
92. Using accountability to reduce access policy violations in information systems10.2753/MIS0742-1222290410 ↗
93. Increasing accountability through user-interface design artifacts: A new approach to addressing the problem of access-policy violations10.25300/MISQ/2015/39.2.04 ↗
94. European Union (2018). Lawful evidence collecting and continuity platform development. Inf. Intell. Syst. Appl., 1, 51–55.