Technological advances have enabled multiple countries to consider implementing Smart City Infrastructure to provide in-depth insights into different data points and enhance the lives of citizens. Unfortunately, these new technological implementations also entice adversaries and cybercriminals to execute cyber-attacks and commit criminal acts on these modern infrastructures. Given the borderless nature of cyber attacks, varying levels of understanding of smart city infrastructure and ongoing investigation workloads, law enforcement agencies and investigators would be hard-pressed to respond to these kinds of cybercrime. Without an investigative capability by investigators, these smart infrastructures could become new targets favored by cybercriminals. To address the challenges faced by investigators, we propose a common definition of smart city infrastructure. Based on the definition, we utilize the STRIDE threat modeling methodology and the Microsoft Threat Modeling Tool to identify threats present in the infrastructure and create a threat model which can be further customized or extended by interested parties. Next, we map offences, possible evidence sources and types of threats identified to help investigators understand what crimes could have been committed and what evidence would be required in their investigation work. Finally, noting that Smart City Infrastructure investigations would be a global multi-faceted challenge, we discuss technical and legal opportunities in digital forensics on Smart City Infrastructure.

翻译：技术进步使得多个国家开始考虑建设智慧城市基础设施，以深入洞察不同数据点并提升公民生活质量。然而，这些新型技术实施也诱使攻击者和网络犯罪分子对这些现代基础设施发动网络攻击并实施犯罪行为。鉴于网络攻击的无国界特性、各方对智慧城市基础设施认知水平的差异以及持续增长的调查工作量，执法机构和调查人员将难以有效应对此类网络犯罪。若调查人员缺乏调查能力，这些智慧基础设施可能成为网络犯罪分子青睐的新目标。为应对调查人员面临的挑战，我们首先提出智慧城市基础设施的通用定义。基于该定义，我们运用STRIDE威胁建模方法论与Microsoft威胁建模工具，识别基础设施中存在的威胁，并构建可被相关方进一步定制或扩展的威胁模型。随后，我们映射犯罪类型、潜在证据来源及威胁分类，以帮助调查人员理解可能发生的犯罪行为及调查工作中所需的证据类型。最后，鉴于智慧城市基础设施调查将成为全球性的多维度挑战，我们探讨了智慧城市基础设施数字取证领域的技术机遇与法律机遇。