# Vulnerability Assessment of Ubiquitous Cities Using the Analytic Hierarchy Process
## 2 The Components of U-Cities and Hazards
### Hazards to a U-City
#### 2.4.1 Man-Made Hazards  
There are two forms of man-made hazards towards technologies applied in U-cities: digitally and physically. Digital man-made hazards are mainly driving by cyber-attacks, but also include a human error or malfunction factories in the system. Some typical digital hazards based on literature [51; 52]:  
Denial-of-services (DoS) and distributed denial-of-service (DDoS) attacks: DoS and DDoS are one of the most popular attacks that targeting private cloud networks to cause reduction or denial of services, by bandwidth or connection flooding with invalid requests hence the legitimate requests got denial [53].  
Man-in-the-middle (MITM) attack: MITM attack happened whenever the attacker intercepts the user's network, or the user traffic intercepted a network controlled by the attacker, and the attacker can decrypt the network cipher without alert the user [54].  
Internet protocol (IP) spoofing: IP spoofing is the attack that breaches a computer or network security by gaining unauthorized access by spoofing the IP address of a trusted device, it camouflages the attack and masking the true identity by sending a malicious message to the target [55].  
Phishing and spear-phishing attacks: Phishing is a cybercrime that a scammer uses fake emails or websites to gather sensitive information by trick people to reveal their details unintentionally, while spear phishing is more target orientated to a specific individual or organization [56].  
Drive-by attack: A drive-by attack is usually associated with other attacks like malware or MITM, the attack is using an insecure website with malicious scripts or code embedded on the page, which may install malware, spyware, or trojan to the victims' devices who visits the site [57].  
Password attack: This is simply an attacker try to obtain the password from a user without their authorization, the attacks can be either digitally using the network but also in the physical world without using any network or electronic devices [58].  
SQL injection attack: This attack injects malicious SQL code into a database program, which processes the user input to the back-end database controlled by the attacker, allows them to delete, copy or modify the content of the database [59].  
Cross-site scripting (XSS) attack: Similar to SQL injection attack, the XSS attacks happen when attackers injected their code into a vulnerable webpage, usually, JavaScript or HTML, and the code allows attackers to steal user information [60].  
Eavesdropping attack: Also known as sniffing or snooping attack, is a cybercrime that steals user information from any devices connected to the network. The attacker can insert the software by virus or malware to extract information from the user, which is commonly associated with MITM attack [61].  
Birthday attack: The birthday attack is a type of cryptographic attack named after the birthday paradox due to the implemented probability of the attack algorithm, which is designed to exploit the communication between two parties and usually affects the digital signature susceptibility [62].  
Malware attack: Malware is software that intentionally causes damage to the device and network, such as Trojan, spyware, and ransomware, the attacks can be a small scale on stealing sensitive information of the individual user to a larger scale on damaging the cloud system or infrastructures [63].  
GSM/GNSS signal jammer: Signal jamming is a major concern in the military and defense sector, as the jamming devices can emit signal noise that interrupts satellite transmissions and impact civilian and military life [64].  
Physical man-made hazards are simply referring to the direct damages and destructions that intentionally targeting U-cities' infrastructure, devices, and installations. Which included but not limited to:  
* Lesser crimes like stealing small devices
* Terrorist vandalism on facilities
* Sabotage infrastructures for wars efforts