Unit 14 Basics of Cyber Security: Understanding Cyberspace, Digital Footprints, and Safety

Every time you send an email, browse a website, or connect to public Wi-Fi, you’re operating in cyberspace-a vast digital environment that has become as important as physical space in modern life. For smart cities, where critical infrastructure, governance systems, and citizen services rely heavily on digital networks, understanding the fundamentals of cybersecurity is no longer optional. This post breaks down the essential concepts of cyberspace, digital footprints, and the distinction between cybersecurity and digital safety.

What is cyberspace? 🔗

Cyberspace isn’t a physical location you can visit-it’s an invisible domain where all online interactions occur. According to the National Institute of Standards and Technology (NIST), cyberspace is defined as a global domain within the information environment consisting of the interdependent network of information systems infrastructures including the Internet, telecommunications networks, computer systems, and embedded processors and controllers.

This definition captures several key elements. First, cyberspace is global-it transcends national borders and physical limitations. Second, it’s interdependent, meaning different systems and networks rely on each other. The internet you use at home connects to telecommunications infrastructure, which links to data centers, which host applications running on countless embedded systems.

For smart cities, this interconnectedness is particularly significant. Traffic management systems, water treatment facilities, power grids, healthcare networks, and emergency services all operate within cyberspace. A security breach in one system could potentially cascade through multiple connected infrastructures.

Components of cyberspace 🔗

Understanding cyberspace requires recognizing its building blocks. The internet serves as the backbone, connecting devices globally through standardized protocols. Telecommunications networks enable voice, video, and data transmission. Computer systems-from personal devices to enterprise servers-process and store information. Industrial control systems manage physical infrastructure in utilities, manufacturing, and transportation. Embedded processors exist in everything from smart thermostats to medical devices, all connected and communicating.

NIST describes cyberspace as the complex environment resulting from the interaction of people, software and services on the Internet by means of technology devices and networks connected to it, which does not exist in any physical form. This human element is crucial-cyberspace is not just about technology but also about the people who use and potentially misuse it.

Digital footprints in the Big Data era 🔗

Every action you take online leaves a trace. These traces-collectively known as your digital footprint-create a detailed profile of your identity, behaviors, and preferences. Digital footprint refers to one’s unique set of traceable digital activities, actions, contributions, and communications manifested on the Internet or digital devices.

Active versus passive digital footprints 🔗

Digital footprints can be classified as either passive or active. Passive footprints consist of a user’s web-browsing activity and information stored as cookies. Active footprints are intentionally created by users to share information on websites or social media.

Active digital footprints include data you deliberately share. When you post on social networking sites, complete online forms, subscribe to newsletters, or accept cookies on your browser, you’re consciously adding to your digital trail. Social media updates, online reviews, blog comments, and video uploads all contribute to this footprint.

Passive digital footprints form without your direct awareness. A passive digital footprint is created when information is collected about the user without them being aware that this is happening. This includes data collected through website cookies tracking your browsing habits, IP addresses logged by servers, geolocation data captured by apps, and behavioral analytics monitoring your clicks and scrolling patterns.

Metadata and the challenge of invisibility 🔗

Much of your digital footprint exists as metadata-data about data. When you send an email, the message content is obvious, but metadata includes when you sent it, who received it, your device type, and your location. Photographs contain metadata revealing camera settings, timestamps, and GPS coordinates. This metadata creates a comprehensive picture of your activities, often more revealing than the content itself.

The use of a digital footprint has both positive and negative consequences. On one hand, personalized recommendations, targeted services, and convenient authentication all leverage your digital footprint. On the other hand, without an individual’s authorization, strangers can piece together information about that individual by only using search engines.

The right to be forgotten: a difficult proposition 🔗

In today’s Big Data environment, can you truly erase your digital past? The “Right to be Forgotten,” codified in Article 17 of the GDPR, attempts to address this. The “right to be forgotten,” which received a lot of press after the 2014 judgment from the EU Court of Justice, set the precedent for the right of erasure provision contained in the GDPR.

This right allows individuals to request deletion of their personal data under specific circumstances. An individual has the right to have their personal data erased if the personal data is no longer necessary for the purpose an organization originally collected or processed it. Other valid grounds include withdrawal of consent, unlawful processing, or data collected from minors.

However, exercising this right faces practical challenges. Ensuring that all copies and instances of personal data are erased can be technically challenging, particularly in distributed and interconnected digital environments. Data may be replicated across servers, cached by search engines, archived by third parties, or backed up in systems beyond the original controller’s reach. Additionally, the global nature of data processing presents challenges, as organizations operating outside the EU may face difficulties in aligning their practices with the GDPR’s data erasure requirements.

Cybersecurity versus digital safety 🔗

Though often used interchangeably, cybersecurity and digital safety address different concerns at different scales.

Cybersecurity: protecting systems and networks 🔗

Cybersecurity operates primarily at the organizational and infrastructure level. According to NIST, cybersecurity encompasses prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communications services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation.

This definition emphasizes several core principles. Availability ensures systems remain accessible when needed. Integrity guarantees data hasn’t been altered inappropriately. Authentication verifies identities. Confidentiality protects sensitive information from unauthorized access. Nonrepudiation ensures actions cannot be denied later.

Cybersecurity involves deploying technology solutions, implementing organizational policies, and establishing processes to defend against cyberattacks. This includes firewalls, intrusion detection systems, encryption protocols, access controls, and incident response procedures.

Digital safety: protecting individual users 🔗

Digital safety focuses on individual users, increasing their awareness of personal security threats and providing practical measures to protect their data and property online. While cybersecurity asks “How do we protect our systems?”, digital safety asks “How do I protect myself?”

Digital safety involves protecting digital devices and data from cyber attacks, viruses, malware, and other online threats. Measures to ensure digital safety include using antivirus software, regularly updating software and applications, and avoiding downloading software from untrustworthy sources.

Key digital safety practices include creating strong unique passwords for each account, being cautious about information shared on social media, avoiding public Wi-Fi networks, avoiding clicking on suspicious links or attachments, and limiting the amount of personal information shared online.

Cyber hygiene: building secure habits 🔗

Just as personal hygiene prevents illness, cyber hygiene prevents security breaches. The Cybersecurity and Infrastructure Security Agency (CISA) emphasizes that using strong passwords, updating your software, thinking before you click on suspicious links, and turning on multi-factor authentication are the basics of what we call “cyber hygiene” and will drastically improve your online safety.

Essential cyber hygiene practices for individuals 🔗

Password management: Maintain good password hygiene and use technology such as multifactor authentication (MFA) to make unauthorized access more difficult. Each account should have a unique, complex password stored in a reputable password manager.

Software updates: Patch management is the flossing of cyber hygiene: everyone knows they should do it, but not everyone does. Updates often contain critical security fixes that address known vulnerabilities.

Phishing awareness: Learn how to avoid falling victim to phishing scams and how to prevent common malware attacks. As a rule, avoid clicking on links and attachments received via email.

Regular backups: Regularly back up important files to a separate, secure location that would remain safe and isolated if the primary network became compromised.

Encryption and secure connections: Use encrypted connections (HTTPS) when browsing, especially for sensitive transactions. Consider VPNs when using public networks.

Organizational cyber hygiene 🔗

For organizations managing smart city infrastructure, cyber hygiene extends further. Best practices include keeping an inventory of your network, including devices, software, and equipment and using a comprehensive and tight patch management system that accounts for network risk. Organizations should also analyze and scrutinize the list of programs and equipment used for vulnerabilities and wipe and dispose of unused equipment properly.

Learning objectives for cybersecurity basics 🔗

Understanding these foundational concepts serves several purposes for smart city stakeholders.

Recognizing the cybercrime landscape: Cybercrimes range from identity theft and phishing to ransomware attacks on critical infrastructure. Knowing the threat landscape helps in preparing appropriate defenses.

Mapping digital vulnerabilities: Your digital footprint reveals potential attack vectors. By understanding what data exists about you or your organization, you can identify what needs protection.

Implementing proactive measures: Rather than responding to breaches after they occur, cyber hygiene emphasizes prevention through consistent, routine security practices.

Balancing connectivity and security: Smart cities depend on interconnected systems, but each connection creates potential vulnerabilities. Learning cybersecurity basics helps in making informed decisions about which systems to connect and how.

The path forward 🔗

Cyberspace forms the operational environment for smart cities. Digital footprints create both opportunities for personalized services and risks of privacy invasion. The distinction between organizational cybersecurity and individual digital safety clarifies responsibilities at different levels. And cyber hygiene provides the routine practices that maintain security over time.

These cybersecurity basics apply to both individuals and the organizations operating smart city infrastructure. As cities become more connected, the attack surface expands-making foundational cybersecurity knowledge essential for everyone from citizens to administrators.

What do you think? Given that your digital footprint is nearly impossible to erase completely, how should smart cities balance the benefits of data-driven services with citizens’ privacy rights? And in your daily life, which cyber hygiene practices do you find most challenging to maintain consistently?

References

1. https://csrc.nist.gov/glossary/term/cyberspace
2. https://en.wikipedia.org/wiki/Digital_footprint
3. https://www.kaspersky.com/resource-center/definitions/what-is-a-digital-footprint
4. https://gdpr.eu/right-to-be-forgotten/
5. https://csrc.nist.gov/glossary/term/cybersecurity
6. https://www.enzuzo.com/blog/digital-privacy-definition
7. https://www.cisa.gov/topics/cybersecurity-best-practices
8. https://www.okta.com/identity-101/cyber-hygiene/