February 24, 2022

NFV Security in 5G – Challenges and Best Practices

This report explores relevant challenges, vulnerabilities and attacks to the Network Function Virtualization (NFV) within the 5G network. NFV changes the network security environment due to resource pools based on cloud computing and open network architecture. 60 security challenges grouped in 7 categories have been identified and explored. Among others, this report exposes vulnerabilities, attack scenarios and their impact on the 5G NFV assets. To address these upcoming challenges, security controls and best practices are put forward in this report, taking into account the particularities of this highly complex, heterogeneous and volatile environment. In particular, 55 best practices categorized in Technical, Policy and Organizational categories have been identified.

https://www.enisa.europa.eu/publications/nfv-security-in-5g-challenges-and-best-practices

The post ENISA: Security in 5G – Challenges and Best Practices appeared first on EMFSA.

•  Press release 3 December 2019

Today the Council adopted conclusions on the significance of 5G to the European economy and the need to mitigate security risks linked to 5G.

The conclusions stress that 5G networks will form a part of crucial infrastructure for the maintenance of vital societal and economic functions.

The conclusions also support the findings in the European 5G Risk Assessment published in October by the member states coordination group on network and information security.

The approach to 5G network security is to be comprehensive and risk-based. 5G security is seen as a continuous process, which starts with the selection of the vendors and lasts the whole way through the production of the network elements and the lifetime of the operation of the networks.

Non-technical factors should also be considered when a supplier’s risk profile is drawn up and components critical for national security should be sourced from trustworthy parties only.

Council conclusions on the significance of 5G to the European economy and the need to mitigate security risks linked to 5G – full text:

st14517-en19

Cybersecurity in Europe: stronger rules and better protection

https://www.consilium.europa.eu/en/policies/cybersecurity/

The post Significance and security risks of 5G technology – EU Council Adopts conclusions appeared first on EMFSA.

5G holds a lot of promise for improved communications but may well worsen the DDoS nightmare as it is unfortunately, a breeding ground for distributed denial of service (DDoS) attacks. As a refresher, DDoS attacks are a malicious method of disrupting a website/online service by overwhelming it with too much traffic.

If a website is rendered inoperable, the effects can be felt even years later. The impact can result in lost sales, wasted budgets, dissatisfied users (who may never return), and data theft. What’s more, DDoS attacks can be very damaging to a company’s reputation. Perhaps most frightening of all is that anyone can fall victim at anytime. Think financial institutions, healthcare, local governments – anyone. Thus, this style of attack is highly powerful and should not be underestimated. The biggest risk is that large-scale DDoS attacks take down financial institutions and critical infrastructure. Thus, DDoS mitigation that can cope with attacks in the range of terabits becomes a crucial necessity.

ENISA: The first malware targeting safety systems of critical infrastructure: during the reporting period, we have observed Triton which is the first malware that targets Safety Instrumented Systems (SIS)86,87,88 Safety instrumented systems are designed to shut down industrial processes when unsafe operating conditions are reached. Successful exploitation of such systems could lead to serious implications (see Stuxnet89 and Industroyer90). It is expected that the ICS/SCADA domain will be increasingly targeted by advanced threat actors having the capability and intent to execute such operations.

On the 1 st of October 2019 the FDA released a statement informing patients, health care professionals, IT staff in health care facilities and manufacturers of a set of cybersecurity vulnerabilities if exploited by a remote attacker—may introduce risks for medical devices and hospital networks. URGENT/11 affects several operating systems that may then impact certain medical devices connected to a communications network, such as wi-fi and public or home Internet, as well as other connected equipment such as routers, connected phones and other critical infrastructure equipment. These cybersecurity vulnerabilities may allow a remote user to take control of a medical device and change its function, cause denial of service, or cause information leaks or logical flaws, which may prevent a device from functioning properly or at all.

FDA informs patients, providers and manufacturers about potential cybersecurity vulnerabilities for connected medical devices and health care networks that use certain communication software

On the 9th of October 2019 the EU Member States published  a report on EU coordinated risk assessment of 5G networks security.

EU-wide coordinated risk assessment of 5G networks security

5G’s anticipated exponential spread of high-speed bandwidth and connected IoT means that in addition to widespread motivation, easily available attack tools, and proliferating IoT attack sources, dramatically bigger attacks will be possible because the “5G highway” will have many more lanes to enable vastly higher rates of traffic—both good and bad.

DDoS in a 5G environment

Unfortunately, cyber criminals can make big bucks through 5G vulnerabilities, and what’s worse is that they know it. 5G boasts hyperconnectivity, but this is most certainly going to create an influx of malicious traffic. As the number of connected devices and 5G deployments increase, so will the number of attacks. In particular, cyber criminals will take advantage of any poorly secured devices. However, it’s not just the amount of attacks that are a concern, but how quickly they can spread too.

There is an element of naïvety about business’s capabilities to combat 5G threats in the first place. CISOs (chief information security officers) already struggle to get resources to handle current threats while business leaders push for 5G adoption. Meanwhile, cybercriminals will take the opportunity to exploit higher capacity bandwidth that 5G provides to launch attacks on an unprecedented scale. Most CISOs don’t have the resources they need for pre-5G attacks anyway! Business leaders are ever so enthusiastic about getting on 5G, but CISO resources are so thin on the ground that it may not be enough.

The post 5G and distributed denial of service (DDoS) appeared first on EMFSA.