۴ý

Skip to main content

CSIS warns 'smart city' technology can open door to attacks, foreign interference

Share
OTTAWA -

Canada's intelligence service warns that technological innovations adopted by municipalities could be exploited by adversaries such as the Chinese government to harvest sensitive data, target diaspora communities and interfere in elections.

A newly released report by the Canadian Security Intelligence Service urges policy-makers and the technology industry to consider steps that can be taken to address and ease the emerging security threat before “smart city” platforms are widely adopted.

Such systems feature electronically linked devices that gather, analyze, store and transmit information through centralized platforms. In turn, municipalities can use artificial intelligence to efficiently control operations and services, allowing them to change traffic lights at the optimal time, manage energy use or track the location of publicly rented bicycles.

“One of the primary security concerns relating to smart cities is the fact that they necessitate the selection and retention of massive, continuously processed data pools that could be exploited to reveal patterns of individual and societal behaviour,” the report says.

“These concerns are heightened by the lack of control and visibility over where this data is stored and who has access.”

The CSIS report, prepared in 2021, was only recently released to The Canadian Press in response to an access-to-information request filed in October of that year.

While the integration of technological innovations and data can make processes more efficient, it can also introduce security risks, CSIS warns.

“Smart city devices collect massive amounts of personal data, including biometric data and other information highlighting personal life choices and patterns. Hostile state actors are currently exploring various means of attaining access to future smart city platforms, including through access provided by state-owned or state-linked technology companies.”

Canadian municipalities may willingly agree to technological partnerships with foreign companies that allow hostile or undemocratic states access to collect data, CSIS cautions.

Smart city projects in western countries have faced pushback due to privacy concerns, but China has “embraced the concept wholeheartedly,” providing the country's technology companies with a competitive edge, the report says. Beijing's artificial intelligence advantage lies in its access to big data, lax privacy requirements and cheap labour to categorize data and build AI algorithms.

China is using such new technologies to support “digital authoritarianism,” the use of advanced technology to monitor, repress and manipulate domestic and foreign populations, CSIS says.

Meanwhile, next-generation networks and interconnected technology will likely become deeply embedded in municipal critical infrastructures in the coming decade, raising the possibility of “back door” access, the report says. A key concern is that a single breach could make all devices vulnerable to interference or attack.

“In other words, data collected through a bike sharing app could theoretically heighten access to other connected devices, such as a city's energy grid, water supply, or traffic-light management database,” the report says.

“This sort of exposure will have serious financial, social and health and safety implications in Canada. Imagine a scenario where a co-ordinated cyberattack took down safety locks that prevent catastrophic explosions at a petrochemical facility, while simultaneously controlling traffic lights to inhibit the emergency response.”

Legal access to data could come through contracts between cities and companies, while illicit access could happen internally through a built-in function of foreign equipment or software, or externally as a result of a cyberattack or data breach, the report says.

The data can subsequently be used to target specific elements of Canadian society, such as Chinese diaspora communities, infrastructure like natural gas plants, water treatment facilities and central government databases, democratic political processes such as elections, or civil society groups to restrict public debate and free expression, it adds.

The use of data-harvesting techniques by countries like China, Iran and Russia to track diaspora populations, namely individuals who are considered opponents, is a genuine concern, said David Murakami Wood, a University of Ottawa professor who specializes in surveillance, security and technology.

“There is no innocent data,” he said in an interview.

Murakami Wood cautioned against believing that data is somehow safer if it is kept entirely in Canadian hands. It is common for organizations to seek access to large pools of data for reasons unrelated to why the data was collected in the first place, he said.

“You can be sure if there's a very large-scale national database constructed, for example, that the police will want access to it sooner or later. And they'll come up with an argument for why they should.”

While it makes sense to have some municipal services connected to the online world, others such as hospitals might simply be too sensitive to risk having them linked to cyberspace, Murakami Wood said.

“If you really want to have a very smart city, we should actually think about what it is you don't want to connect, first of all.”

Taking the necessary steps to address the security threats of smart cities will require informed discussion and consultation at all levels of government, the CSIS report says.

“Different authorities have jurisdiction over various elements of this challenge. Key among these are municipalities who are leading the way in terms of implementation and contractual arrangements with technology vendors.”

The report also recommends:

  • Co-operating with partners in the Five Eyes intelligence alliance to identify the risks posed by smart city technologies;
  • Collection of intelligence and formulation of advice on adversaries' smart city advances and interests to support Canada's position in negotiations on international technology standards and governance; and
  • Ensuring Canadian technology and data are not used to support the development of technologies to be employed in ways that are contrary to democratic values.

This report by The Canadian Press was first published March 9, 2023.

IN DEPTH

Opinion

opinion

opinion Don Martin: How a beer break may have doomed the carbon tax hike

When the Liberal government chopped a planned beer excise tax hike to two per cent from 4.5 per cent and froze future increases until after the next election, says political columnist Don Martin, it almost guaranteed a similar carbon tax move in the offing.

CTVNews.ca Top Stories

The president and CEO of New Brunswick-based Covered Bridge Potato Chips is taking an 'extended leave of absence' after being charged with domestic violence this past weekend.

A memorial is growing outside a Walmart in Halifax after a 19-year-old employee was found dead inside an oven in the store Saturday night.

A search has started at Prairie Green Landfill for the remains of two victims of a serial killer.

He is a familiar face to residents of a neighbourhood just west of Roncesvalles Avenue.

Canada's discount airline is suspending operations to and from Saskatoon.

A new report suggests that Canadians' exposure to a radioactive gas is increasing, putting millions of people at a higher risk of developing lung cancer.

Local Spotlight

He is a familiar face to residents of a neighbourhood just west of Roncesvalles Avenue.

A meteor lit up our region's sky last night – with a large fireball shooting across the horizon over Lake Erie at around 7:00 p.m.

Residents of Ottawa's Rideauview neighbourhood say an aggressive wild turkey has become a problem.

A man who lost his life while trying to rescue people from floodwaters, and a 13-year-old boy who saved his family from a dog attack, are among the Nova Scotians who received a medal for bravery Tuesday.

A newly minted Winnipegger is hoping a world record attempt will help bring awareness for the need for more pump track facilities in the city.

A Springfield, Ont. man is being hailed a 'hero' after running into his burning home to save his two infant children.

Hortense Anglin was the oldest graduate to make her way across the platform at York University's Fall Convocation ceremony this week. At the age of 87, she graduated with an Honours degree in Religious Studies.

Looking for a scare with good intentions this Halloween season? The ghosts and ghouls of Eganville, Ont. invite families to tour the Haunted Walk at Lekbor Manor.

The image of a sleepy Saskatchewan small town with 'not a lot going on' is a well-known anecdote. However, one Saskatchewan company is hoping to change that – and allow communities both on and off the beaten path to share their stories and advertise what they have to offer.

Stay Connected