SECURITY FRAMEWORK FOR CYBER-PHYSICAL SMART PARKING SYSTEMS WITH AUTOMATED LICENSE PLATE RECOGNITION

Authors

DOI:

https://doi.org/10.28925/2663-4023.2025.29.900

Keywords:

cybersecurity, cyber-physical systems, smart parking, automated license plate recognition, computer vision, IoT security, vulnerability assessment

Abstract

Smart parking systems with automated license plate recognition (ALPR) are getting more popular in cities, but they have serious cybersecurity problems. This study analyzes security threats in smart parking infrastructure and offers ways to reduce them via vulnerability assessments and improved security designs. We analyzed various attacks such as protocol exploits and data interception risks in cyber-physical parking systems. Our research studies RTSP camera communication vulnerabilities, REST API security problems, and cloud service integration risks in license number recognition systems using computer vision technologies. Our approach includes vulnerability testing, threat modeling with STRIDE framework, penetration testing, and security analysis. We studied problems of RTSP camera protocol, HTTP/HTTPS communications, Laravel REST API setup, and Google Cloud Vision API integration. Results show that smart parking systems may have data interception risks, unauthorized access, API security problems and system integrity threats, which need multi-layered security approaches. We designed a cyber-physical parking system prototype with improved security measures in all components. The prototype has good license plate recognition accuracy while applying security methods without major performance reduction. Important security factors include secure communication protocols, encrypted transmission of data, authentication frameworks, input validation, rate limiting, and logging systems. This research helps to understand cybersecurity facets in IoT-based parking systems and offers methods for secure automated vehicle recognition setup in smart cities. This work is truly relevant for Ukrainian smart city projects, showing methodology applicable by IT companies for critical infrastructure protection.

Downloads

Download data is not yet available.

References

Radiuk, P., Pavlova, O., El Bouhissi, H., Avsiievych, V., & Kovalenko, V. (2022). Convolutional neural network for parking slots detection. CEUR Workshop Proceedings, 3156, 284–293. https://hdl.handle.net/11300/26607

Durlik, I., Miller, T., Kostecka, E., Zwierzewicz, Z., & Łobodzińska, A. (2024). Cybersecurity in autonomous vehicles—Are we ready for the challenge? Electronics, 13(13), 2654. https://doi.org/10.3390/electronics13132654

Higgins, M., Jha, D. N., Blundell, D., & Wallom, D. (2025). Security by design issues in autonomous vehicles. arXiv preprint. https://doi.org/10.48550/arXiv.2501.04104

Guirrou, H., Youssef, T., Mohamed, Z. E., & Amal, T. (2024). Cybersecurity in autonomous vehicles: A comprehensive review study of cyber attacks and AI based solutions. International Journal of Engineering Trends and Technology, 72(1), 101–116. https://doi.org/10.14445/22315381/IJETT V72I1P111

Kim, K., Kim, J. S., Jeong, S., Park, J.-H., & Kim, H. K. (2021). Cybersecurity for autonomous vehicles: Review of attacks and defense. Computers & Security, 103, 102150. https://doi.org/10.1016/j.cose.2020.102150

Ghazali, A. A., & Fadzil, L. M. (2025). Intelligent illuminated parking system from cybersecurity perspectives: A review. International Journal of Electrical and Electronic Engineering (IJEEE), 12(1). https://doi.org/10.14445/23488379/IJEEE V12I1P119

Smart Parking Ltd. (2024, March 29). Innovative parking transformation. Retrieved from https://www.smartparking.com/nz

ZKTeco. (2024, April 20). ZKTecoParking. Retrieved from https://www.zkteco.com/en/VideoParkingGuidanceSystem/ZKTecoParking

OpenALPR. (2024, April 20). Automatic license plate recognition. Retrieved from https://www.openalpr.com/

OpenALPR. (2024, April 20). OpenALPR library. Retrieved from https://github.com/openalpr/openalpr

CVE 2025 30112: Bypass device pairing of 70mai Dashcam 1S. (2025, March 24). Retrieved from https://github.com/geo-chen/70mai/blob/main/README.md#finding-1---cve-2025-30112-bypass-device-pairing-of-70mai-dashcam-1s

CVE 2025 5113: Remote code execution on Diviotec IP Camera. (2025, June 3). Retrieved from https://www.onekey.com/resource/security-advisory-remote-code-execution-on-diviotec-ip-camera-cve-2025-5113

Kovalenko, V. V. (2022). Cyber physical smart parking system based on computer vision technology (Master’s thesis). Khmelnytskyi National University.

Avsiievych, V., & Kuzmin, A. (2022). Research of smart parking system vulnerabilities and ways to eliminate them. Aktualni problemy komputernykh nauk (APKN 2022), 11–14. Khmelnytskyi National University.

Google Cloud. (2023, December 2). Vision AI. Retrieved from https://cloud.google.com/vision

Avsiievych, V., & Kawonga, R. (2023). Security of smart parking cyber physical system. Information Technology & Engineering – 2023, 59–61. Mykolayiv, Ukraine.

Pavlova, O. O., Avsiievych, V. R., & Kuzmin, A. A. (2023). Research of factors influencing mobile application security on the example of the client part of a cyber physical smart parking system. In Stan, dosyahnennya ta perspektyvy informatsijnykh system i tekhnolohij: materialy XXIII Vseukrayinskoyi naukovo tekhnichnoyi konferentsiyi molodykh vchenykh, aspirantiv ta studentiv (pp. 98–99). ONTU Publishing House.

Hikvision Ukraine. (2024, April 20). Hikvision cameras with PoE support and outdoor installation. Retrieved from https://hikvision.co.ua/ua/kamery-videonablyudeniya/ip-kamery/?ocf=F76S3V430F60S3V373

Laravel. (2024, February 19). The PHP framework for web artisans. Retrieved from https://laravel.com/

Laravel. (2024, February 19). Laravel framework GitHub. Retrieved from https://github.com/laravel/framework

TutorialsPoint. (2024, February 19). Laravel – overview. Retrieved from https://www.tutorialspoint.com/laravel/laravel_overview.htm

Netguru. (2024, April 20). What is React Native. Retrieved from https://www.netguru.com/glossary/react-native

Facebook. (2024, April 20). React Native. Retrieved from https://github.com/facebook/react-native/blob/main/packages/react-native/scripts/cocoapods/helpers.rb

Google Cloud. (2024, April 20). Vision API. Retrieved from https://cloud.google.com/vision?demo

Internet Engineering Task Force. (2024, December 15). RFC 7519: JSON Web Token (JWT). https://tools.ietf.org/html/rfc7519

Elfaki, A. O., Messoudi, W., Bushnag, A., Abuzneid, S., & Alhmiedat, T. (2023). A smart real time parking control and monitoring system. Sensors, 23(24), 9741. https://doi.org/10.3390/s23249741

Alpana, A., Nikhil, K., Kunal, M., Shritej, N., & Shreenath, P. (2024). Parking the future: A review of IoT based parking systems. International Research Journal of Modernization in Engineering Technology and Science, 6(11), 2513–2517. https://doi.org/10.56726/IRJMETS63971

Mohamed, E., Heba, A., Mahmoud, S. E., Anca, D. J., & Marianne, A. A. (2023). Intrusion detection for electric vehicle charging systems (EVCS). Algorithms, 16(2), 75. https://doi.org/10.3390/a16020075

National Institute of Standards and Technology (NIST). (2024, December 15). Cybersecurity framework: NIST special publication 800 53 Rev. 5. Retrieved from https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

ISO/IEC. (2024, December 15). ISO/IEC 27005:2018 – Information security risk management. Retrieved from https://www.iso.org/standard/75281.html

OWASP. (2024, December 15). Internet of Things (IoT) Top 10. Retrieved from https://owasp.org/www-project-internet-of-things/

Downloads


Abstract views: 9

Published

2025-09-26

How to Cite

Avsiievych , V., Павлова, О., & Mykhalchuk, I. (2025). SECURITY FRAMEWORK FOR CYBER-PHYSICAL SMART PARKING SYSTEMS WITH AUTOMATED LICENSE PLATE RECOGNITION. Electronic Professional Scientific Journal «Cybersecurity: Education, Science, Technique», 1(29), 536–547. https://doi.org/10.28925/2663-4023.2025.29.900