The real solution is to take the networks off the internet, like the nuke plants do. If the city's network is off the internet, then the hackers have a much harder time getting in. In fact, the only way to get into a nuke plant network is by having an insider connect it to the internet. Nuke plants do have networks connected to the outside, but critical plant control functions are completely isolated.