This paper presents the results of a recent study that was conducted with a number of German municipalities/cities. Based on the obtained and briefly presented recommendations emerging from the study, the authors propose the concept of an Urban Data Space (UDS), which facilitates an eco-system for data exchange and added value creation thereby utilizing the various types of data within a smart city/municipality. Looking at an Urban Data Space from within a German context and considering the current situation and developments in German municipalities, this paper proposes a reasonable classification of urban data that allows to relate the various data types to legal aspects and to conduct solid considerations regarding technical implementation designs and decisions. Furthermore, the Urban Data Space is described/analyzed in detail, and relevant stakeholders are identified, as well as corresponding technical artifacts are introduced. The authors propose to setup Urban Data Spaces based on emerging standards from the area of ICT reference architectures for Smart Cities, such as DIN SPEC 91357 “Open Urban Platform” and EIP SCC. Thereby, the paper walks the reader through the construction of an UDS based on the above mentioned architectures and outlines all the goals, recommendations and potentials, which an Urban Data Space can reveal to a municipality/city.

The constant increase in volume and wide variety of available Internet of Things (IoT) devices leads to highly diverse software and hardware stacks, which opens new avenues for exploiting previously unknown vulnerabilities. The ensuing risks are amplified by the inherent IoT resource constraints both in terms of performance and energy expenditure. At the same time, IoT devices often times generate or collect sensitive, real-time data used in critical application scenarios (e.g. health monitoring, transportation, smart energy, etc.). All these factors combined make IoT networks a primary target and potential victims for malicious actors. In this paper, we present a brief overview of existing attacks and defense strategies against urban IoT networks. The goal of this work is twofold: First, it presents a summary of some of the common attack vectors and the corresponding solutions available in the research literature. Then, the paper lays out a theoretical plan and a corresponding pipeline of steps (i.e. development and implementation process) for the design and application of the solutions encountered throughout the course of the research efforts. The end goal of following this plan is the deployment of the proposed IoT security measures in a real-world urban IoT infrastructure.