标题： 大规模活动的网络安全：保护MahaKumbh 2025数字基础设施的案例研究——一个6亿人次参与的45天大型活动 显示英文标题

标题： Cyber security of Mega Events: A Case Study of Securing the Digital Infrastructure for MahaKumbh 2025 -- A 45 days Mega Event of 600 Million Footfalls

摘要： 大型活动如奥运会、世界杯赛事、二十国集团峰会、宗教活动如大壶节正日益数字化。 从活动票务、供应商展位或住宿预订、卫生管理、活动安排、客户服务、犯罪报告、媒体流和数字看板上的消息传递、监控、人群控制、交通控制以及许多其他服务都基于移动和网络应用、有线和无线网络、闭路电视（CCTV）摄像机网络、配备网络和视频监控的专业控制室。 因此，针对这种数字基础设施的网络威胁很常见。 从业余黑客、黑客活动主义者、网络犯罪团伙到国家行为者，所有这些人都会针对这种基础设施，以在原本顺利的运营中制造混乱，并且通常网络威胁行为者试图让主办国或主办方丢脸。 与长期存在的组织如公司或政府部门不同，大型活动的基础设施是临时性的，在短时间内为了便利而搭建，常常采取捷径以确保活动的截止日期。 因此，保护这种复杂但临时的基础设施需要一种不同于保护标准组织数字基础设施的方法。 在本文中，我们描述了我们作为网络安全评估和风险管理监督团队，对印度普拉亚格拉杰举行的为期45天的2025年大壶节——一个6亿人次参与的大型活动的安全措施方法。 应注意到，在45天的活动期间，没有任何网络攻击成功。 我们的目标是记录方法，并讨论如果我们在类似的未来大型活动中工作，我们会做哪些不同的事情。 显示英文摘要

摘要： Mega events such as the Olympics, World Cup tournaments, G-20 Summit, religious events such as MahaKumbh are increasingly digitalized. From event ticketing, vendor booth or lodging reservations, sanitation, event scheduling, customer service, crime reporting, media streaming and messaging on digital display boards, surveillance, crowd control, traffic control and many other services are based on mobile and web applications, wired and wireless networking, network of Closed-Circuit Television (CCTV) cameras, specialized control room with network and video-feed monitoring. Consequently, cyber threats directed at such digital infrastructure are common. Starting from hobby hackers, hacktivists, cyber crime gangs, to the nation state actors, all target such infrastructure to unleash chaos on an otherwise smooth operation, and often the cyber threat actors attempt to embarrass the organizing country or the organizers. Unlike long-standing organizations such as a corporate or a government department, the infrastructure of mega-events is temporary, constructed over a short time span in expediency, and often shortcuts are taken to make the deadline for the event. As a result, securing such an elaborate yet temporary infrastructure requires a different approach than securing a standard organizational digital infrastructure. In this paper, we describe our approach to securing MahaKumbh 2025, a 600 million footfall event for 45 days in Prayagraj, India, as a cyber security assessment and risk management oversight team. We chronicle the scope, process, methodology, and outcome of our team's effort to secure this mega event. It should be noted that none of the cyber attacks during the 45-day event was successful. Our goal is to put on record the methodology and discuss what we would do differently in case we work on similar future mega event.