Editing Chapter 6: Edge Security and Privacy (section)

====Solutions Introduced:====
;Net Separation
: The city designed its infrastructure with isolation zones; meaning traffic
systems are completely isolated from all other municipal services so if one zone is attacked all
other zones of that type remain intact.
;Password Overhaul
: Each unit was provided with a complete rehash to change its default
passwords and other weak credentials to hardened unique passwords. Remote administrative
access was only accepted with Multi-Factor Authentication.
;Embrace of a Zero Trust Model
: In this city, we employed a robust, Zero Trust model. A
central token service gives authorization to every device communication and does not assume
the inherent trust of devices.
;Firmware Handling
: The OTA management system required by installation ensures known
exploits like traffic light management are repaired when discovered. Firmware cannot be
updated at weaker sites as the assumption is it is regularly updated.
;AI-based IDS Deployment
: An AI-based IDS at a traffic control center learns about every
equipment normal behavior going on at this session (like how frequently commands are sent out
for lighting systems) generate alerts, activate promise lockdowns any time an abnormal behavior
appears Mechanisms for rapid dissemination throughout the city.