The new threats and risks of 5G

Sunil Ravi at Versa Networks explains how organisations must revisit security protocols to protect their networks from the new cyber threats present in 5G technology

 

5G is the new buzzword in the tech industry. Almost every smartphone that is released nowadays has the word ‘5G compatibility’ printed in bold across its spec sheet. In the next five years, we’ll see the majority of mobile subscriptions switch to 5G. Our internet speeds will become lightning-fast, no-more frozen Zoom calls, real-time connectivity, and countless other benefits.

 

It’s exciting news for our globally connected communities, where connectivity is at the heart of everyone’s daily lives and every company’s daily operation. But there’s a catch! 5G will come bearing gifts, but it’ll also open the doors to new threats and risks businesses have rarely seen before.

 

5G and new cyber-security threats

The increased connectivity of 5G technology will evidently enhance IoT functions and the inter-connectivity of smart devices. By design, IoT promotes simplicity of usage, therefore these devices are increasingly vulnerable to cyber attacks. The increased number of connected IoT devices will provide a greater surface for DDoS (distributed denial of service) attacks.

 

Simply put, DDoS attacks aim to overwhelm a network and disrupt all services. So, increased connectivity means that more devices will be easily impacted by a DDoS attack.

 

Not just DDoS, but any inbound volumetric attack will create greater risks for 5G connected devices. Take zero-day attacks for example. 5G technology will increase our mobility. It will allow seamless remote working, where an employee’s location doesn’t have to be static. Also, we’re already seeing organisations building a network ecosystem with their suppliers and vendors, thus increasing their external connectivity.

 

This is a perfect scenario for attackers, as infiltrating a software or product vendor’s device will allow them to move towards the larger organisation. Basically, it’ll give attackers a ladder to move their malware across several devices within a supply network of organisations.

 

Cyber criminals and the telecommunications industry

Over the years, the telecommunications industry has invested largely in cyber-security resources. However, it is still one of the most vulnerable industries to potential cyber attacks. This is because the number of attacks targeting this industry is also increasing. Infiltrating telecommunication networks allow attackers to gain access to massive pipelines of data and confidential information, which is a potential gold mine for attackers.

 

The products and service design of telecom companies are continuously changing every year. While accommodating this rapid innovation, balancing priorities between security considerations and other key operations such as marketing and design can be challenging. Threat actors recognise this complexity as a potential vulnerability and see the telecom industry as a very appealing target.

 

A rounded approach to cyber-security

Cyber-security should be the first concern to be addressed by any company that deals with data and connectivity. More importantly, it should be addressed at every stage of a product’s lifecycle, from product and development to distribution.

 

Cyber-security is a continuous process, rather than a one-time implementation. Businesses need to provide frequent security updates to protect their networks against advanced threats. When companies side-line security requirements, attackers are already busy deploying new malware and intrusion technologies to crumble these unaware networks.

 

Innovation is great and it’s the need of the consumer market, but it should never come at the cost of security. When implementing 5G technology, companies should not cut corners in security testing. The 5G space is still new to us and the full extent of vulnerabilities associated with this technology is still unknown, therefore organisations must ensure that security is fully researched and tested.

 

IT professionals and leaders are seeing the headlines about cybersecurity and the potential dangers of 5G. Some companies have taken steps to introduce advanced security frameworks when implementing 5G technology. However, this needs to continue to grow in the future, otherwise, threat actors will always have the upper hand.

 

The truth is cyber criminals these days only need a small window of opportunity. They have access to malware that needs little to no dwell time. Leaving any scope for threat actors can cost companies significantly.

 

With the increased interconnectivity enabled by 5G, CISOs and security teams can only do so much in terms of real-time threat assessment. So, companies need to shift towards automated solutions that can monitor interconnected networks continuously in real-time.

 

The balance between security and performance

Organisations can achieve a balance between increased security measures and efficient networking performance by prioritising secure access service edge (SASE). It’s an advanced solution that creates a stronger integration between network and security.

 

SASE ensures that networking performance is not impacted when addressing any security risk. It establishes and maintains security policies, zero trust access, and network segmentation to mitigate malware movements in addition to restricting threats from entering every layer of a network. Thus, the impact of cyber attacks is reduced, giving professionals enough time and resources to stay ahead of them.

 

As a solution, SASE can help organisations in a wide range of security domains. It identifies, classifies, and segments unfiltered traffic. With 5G, it is evident that interconnected network traffic will increase. SASE is the ultimate solution to keep a check on that traffic and keep your organisation protected, while not interrupting your business performance.

 

---

 

Sunil Ravi is Chief Security Architect at Versa Networks

Main image courtesy of iStockPhoto.com