& cplSiteName &
Comments
You must login to participate in this chat. Please login.

Patrick is going to be joined by service provider and vendor specialists December 5 at the MOBILE NETWORK SECURITY STRATEGIES one-day conference in New York City

http://events.lightreading.com/mnss/

Blogger

Thanks, Patrick! And thanks everyone for joining. Hope to see some of you in NYC for our Mobile Security conference. Going to be a good one!

Blogger

And thanks everyone for joining in and asking some great questions and making excellent points -- this is a MASSIVE topic with a great many strands.

Blogger

I think we all know there are several layers in the network and I would expcet carriers to encrypt each layer to take the liability off of them.  Then, as someone pointed out, an app on the device and then additional encryption in the handset.  Security on LTE has been questioned for years and probably one of the reasons for the hesitacny in delivering services like VoLTE.

Light Sabre

Thanks Patrick! Great insights.

Blogger

ALL; Thanks all, have a good day.

Light Sabre

Taraseals: Carrier responsibility. Starting point here is that the carrier has responsbility to its employees and shareholders. Consistent with that, carriers allow competitors to lead on security at their peril. It follows from that they need to take a role, although fast moving technology (and regulation) make that a permanently moving set of goal posts.

Light Sabre

all too often, rather-- sorry for typos...

Light Sabre

Hello all.  I am wondering if some of the video optimization solutions carriers are placing into their networks have a filter to weed out spam.

Light Sabre

Ray: I think we've been hearing "Google will solvee the problem" all to aften actually....mostly from Google itself!! ;-)

Light Sabre

Great question, Sarah, about personal information protection, privacy and so on. Thorny, difficult waters there but it seems that should be a big issue in 4G as more people do full computing and move around all kinds of information via mobile broadband. What responsibility does the carrier have in all of that? If any? 

Light Sabre

I know.  Scary right?

Light Sabre
pzernick - not often you hear anyone saying that Google will solve the problem...
 

 

Blogger

People will need to run an app on their phone to block this kind of spam as they do email spam.  Google will solve the problem, not operators

Light Sabre

Ray:Hysteria. Not all and not all.

Light Sabre

RAY, VOLTE. Sure like I said Video messaging. The price of messgaing in going through the floor. Capacity and speed of LTE. You could use the equivlanet of Next Gen SIM boxes to generate hundreds/thousands of video spam messages.

Light Sabre

And certainly before we get to the end of the chat today I want to get to Patrick's opening remark - "Too much box-mongering hysteria on the part of some vendors on the one hand. Too much complacency on the part of some operators on the other."

Are the operators still too complacent and are all the vendors engaging in 'box-mongering hysteria'?

Blogger

Ray: VOLTE. Tendency sometime to think of that as "voice" whereas attacks tend to be associated with "data". Except VoLTE is data....

Light Sabre

Ray: yes! I'm coughing right now. Patrick: That sounds awful. I've heard about SPIT or voice spam...are the possibilities there even greater in VoLTE?

Light Sabre

I thought we would have more questions around VoLTE -- will the introduction of VoLTE services on multiple networks, expected in 2014-15, be the opening of the security threat floodgates?

Blogger

I think people chose that too because of the heightened awareness around the NSA and snooping...

Blogger

On our LR poll, we asked what people are most concerned with and the most votes went to criminals stealing sensitive information. That's often a handset-level issue, but is it a real network threat too? 

Blogger

Taraseals: Robocalls. Not just hijacking for own use but using robocalls as another typoe of DDoS attack. U.S govt issued notice to public govt agencioes recently of this attack. Bombard the Dept of Whatevcer with thousands of calls. Phone them up and demand $5000 for them to stop the attack or else it continues. In RCS land (when we get there...) think of video messaging.  Think of SMS spamming - what about video messaging spamming? Impact on congestion way, way greater.

Light Sabre

Tara - a threat to everyone's health, the Robocalls.... that's an interesting point on service hijacking - I have heard of that being an issue for fixed line ISPs.

Blogger

Robocalls! The bane of the political season! Are there other threats though besides "nuisance" type issues? You're talking about hackers essentially hijacking a VoIP service for their own uses?

Light Sabre

mark12 - welcome! good question, Patrick just completed a report on that called 

Mobile Network Outages & Service Degradations: A Heavy Reading Survey Analysis
Blogger

Mark12. NO doubt there are "vulnerabilities" in Diameter. Issue pertaining to early LTE networks was that it wasn't designed to deal and respond in a telco-like way to flooding incidents. That's being addressed now. Diameter Routing Agents (DRAs) helping too. Wouldn't call that a secuirty vulnerability per se. Sure there are some though. And more in future no doubt.

Light Sabre

Ah yes, security is one reason operators site on why it takes soooo long to work with them on APIs. Exposing network access is a non-trivial issue though. Makes sense, but still. :)

Blogger

pzernick - Yeah, I think that might be a request too far for this medium.... big BIG question! But a good one all the same

 

Blogger

These are potential risk areas but I am intersted in any reported exploits against real vulnerabilties in say Diameter as you mentioned...

Light Beer

Send a link to a good white paper Patrick!

Light Sabre

pzernick: List of threats and costs - not post, resrach and present over 4-6 pages maybe !

Light Sabre

SarahReedy: small cells. Yes a gratuitous snipe on my part.

Light Sabre

TaraSeals Web-facing APIs. The operators are used to exposing their APIs to their subscriebr sim cards, which are highlky, highly secure. Internet's a different animal. SIP very open, very vulnerable. Multiple risk vectors including Robocalls

Light Sabre

Patrick, why aren't public access small cells not an issue? Because they don't have scale yet?

Blogger

Can you talk a little about the possible exploits stemming from those vulnerabilities that you mentioned, like oWeb-facing VoLTE APIs and unencrypted backhaul? What are the looming potential threats involved for carriers and their customers?

Light Sabre

Sarah,

Mpayments has more than just a security issue. Other issue is that other forms of payment in this country are very efficient (believe it or not) compared to the rest of the world. That's why paper checks have stubbornly hung on, even when their end was forecast decades ago.

Light Sabre

TaraSeals. Femtocell issues are known. VZW had an isue on their CDMA femto line earlier this year so goal posts are always moving. public access small cells aren't an issue. In theory they are, in practice there aren't gonna be any for a while anyway....

Light Sabre

Can you post a list of threats (i,e, DOS) by prioritized by most likely and prioritzed the same list again by most costly to operators?

Light Sabre
Identify and block malicious traffic. Big market opportunity for vendors. Operators dont have very granular insight at all into their traffic. Lots of malcious traffic going under the radar. solutions out there to identify and block.
Light Sabre

Mark12; Real 4G threats? All the 3G threats plus some new ones: unencrypted backhaul; volumes of diameter signalling, opening APIs the Internet for VOLTE and RCS. You name it

Light Sabre

That's one big reason mHealth has had a hard time taking off...same with mobile payments.

Blogger

Are $G security threats that different from 3G sewcurity threats?

 

Blogger

TaraSeals: a malware-initiated data breach at a healthcare facility. It all depends. If the malware breach occured on a piece of equipment provide as part of an mHealth service by a care provider to a patient then the care provider would almost certainly be liable for resulting damages, not the service provider.

Light Sabre

Good point re: Femto security. That seems a different ball of wax from 4G networks themselves though...

Light Sabre

And to follow on from the DPI question, what can carriers do to identify and block malicious traffic traversing their networks? Typically terrestrial ISPs don't bother and leave that job up to browser seecurity and the like from what I understand.

Light Sabre

So what are the real 4G/LTE threats and not just speculation (e.g., there were real exploits reported with 3G femto cells)... 

Light Beer

What are the uniquely 4G security measures operators are or should be taking?

Blogger

Hi everyone-- I'm excited about this topic! I have a question: most of the reports focus on Android security and the growth in mobile malware on that platform. It seems that the onus is on end users to adopt better mobile security practices, especially when it comes to BYOD. And, corporate IT departments have the other part of the responsibility to protect their organizations with good policies, defenses and enforcement. What role, if any, do carriers play in taking responsibility for, say, a malware-initiated data breach at a healthcare facility? Or do carriers mainly have an opportunity to offer help to IT folks in the way of offering managed security services?

 

Light Sabre

What do you see as the biggest threat facing operators today?

 

Light Sabre

@pdonegan67 do you know of any reputable vendors who are in business with any Tier 1 carrier?

Light Sabre

pzernik: Not necessarily all that deep so sort of.

Light Sabre

To Ray: IPsec from the base station to the backhaul is uniquely relevant to 4G. A lot of techn ologies are common to 3G and 4G.

 

Light Sabre

Good point, pzernik. I wonder how much of the malware affecting phones happens to rooted phones.

Blogger

By filtering do you mean "deep packet inspection?"

 

Light Sabre

Are there any particular network security technologies that are more suitable for 4G service providers to deploy? And where in the network should they put up their defenses?

Blogger

To Phil Britt: There's a limit to how much an operator can do. But by investing in network-side security filtering you can at least prevent most incoming email or sms borne malware from getting to the user's device.

Light Sabre

Carriers should be able to identify users who ROOT their phones as they can then install applications that are not from an "app store" and also can remove security software that the service provider had pre-loaded on the devices.

Light Sabre

To Ray:

To your question Ray, yes on the whole we do see integrated incumbents generally being stronger in security than pure-play mobile operators but there are still quite a few exceptions to that. More often than not, the reason the integrated incumbents are stronger in security is that because of the association with the fixed line parent, their mobile arms have done disproportionately well in the corporate and government subscriber market. That's been the main driver of their leadership rather than because of graceful interchange of security smarts from the fixed to the mobile side of the house which does sometimes happen but more typically doesn't.

Light Sabre

Hi, all. Looking forward to the chat.

Blogger

Another early question: How does a provider protect against users not practicing "safe mobile security?"

Light Sabre

Nicely set up Patrick! Looking forward to it. I mean, where else can you find an appraisal of "box-mongering hysteria"?

Blogger

Looking forward to today's chat with the Light Reading crew. Good idea to do this - sort out the wheat from the chaffe of this subject matter. Too much box-mongering hysteria on the part of some vendors on the one hand. Too much complacency on the part of some operators on the other. Bring the conversation on.

Light Sabre

This is a test message

Light Sabre

I'm thrpowing out an early question for Patrick -- do  carriers with both fixed and mobile operations teams have an advantage in tackling the network security challenges that come with a 4G rollout because they already have experience of dealing with some of the issues in their fixed networks?

Blogger

Hi everyone! We will be holding our next live chat on Thursday, November 14, at 11 a.m. EST/8 a.m. PST with Heavy Reading senior analyst Patrick Donegan. We'll be discussing the many mobile network security challenges that face wireless operators as they roll out 4G. And there are plenty. Join in right here on Thursday, November 14, at 11 a.m. EST/8 a.m. PST.

Blogger


From The Founder
Either we perform a complete 'factory reset' on the way the telecom industry creates and deploys virtualization, or we face the consequences.
Flash Poll
Live Streaming Video
Charting the CSP's Future
Six different communications service providers join to debate their visions of the future CSP, following a landmark presentation from AT&T on its massive virtualization efforts and a look back on where the telecom industry has been and where it's going from two industry veterans.
LRTV Custom TV
The Urgency of Commercial 5G Services

4|26|17   |     |   (0) comments


The progress of 5G has been closely monitored in the industry. At the 2017 Brooklyn 5G Summit, the sense of urgency for a commercial 5G launch had started to surface among operators.
Women in Comms Introduction Videos
How Diversity Helps Comcast Mirror Its Customer Base

4|26|17   |   2:55   |   (0) comments


Diversity brings innovation, creative ideas and a way to reflect the broad spectrum of your customer base, Comcast Director of Customer Experience Jenelle Champlin says.
LRTV Huawei Video Resource Center
Mobile Operators & Video

4|25|17   |     |   (0) comments


Ovum's Ed Barton discusses the latest mobile operator strategies for mobile video.
LRTV Custom TV
Infinera Introduces Instant Network

4|20|17   |     |   (1) comment


Mike Capuano, vice president of marketing at Infinera, discusses the advancement from Instant Bandwidth to new Instant Network capabilities, which include Bandwidth License Pools, Moveable Licenses and Automated Capacity Engineering (ACE).
Women in Comms Introduction Videos
Vodafone's Eubank on Sponsors, Mentors & Moving On Up

4|19|17   |   4:25   |   (0) comments


Vodafone America's Head of Operations Kimberly Eubank breaks down the difference between a sponsor and a mentor and shares why both made a big difference in her career.
LRTV Custom TV
NYC Auto Show: Are We Smart Yet?

4|18|17   |     |   (0) comments


The auto industry is facing some big transformations as electric vehicles, autonomous technology and connected cars are seen as the future of the industry. During the much-anticipated NY international auto show, there was an emergence of new technology and mobility service on the show floor. Aside from performance, brands like Lincoln, Hyundai, Honda, Mercedes and ...
LRTV Huawei Video Resource Center
The Impact of Video

4|18|17   |     |   (0) comments


David Mercer from Strategy Analytics discusses the impact of video on current strategies.
LRTV Custom TV
Pardeep Kohli Discusses Network Transformation & the Market Opportunity for the 'New' Mavenir Systems

4|13|17   |     |   (0) comments


In a brief discussion at MWC 2017, Heavy Reading analyst Adi Kishore talks to Pardeep Kohli, CEO, Mavenir Systems about the creation of the 'new Mavenir' and some of the key challenges facing operators in today's market. A key theme of the discussion centers around operator need for software-only, virtualized solutions and how they will need to adapt to ...
Women in Comms Introduction Videos
Tech Maverick Shares Her Tips for Gender Inclusivity

4|12|17   |   7:28   |   (0) comments


Wendy Hall Bohling, a corporate escapee, author and gender exclusivity consultant, tells her story of sexism, bias and progress along the road to gender equality in the workforce.
LRTV Huawei Video Resource Center
Huawei at MWC 2017

4|11|17   |     |   (0) comments


At Mobile World Congress 2017, the biggest mobile industry gathering of the year, Huawei showcased its new innovations and solutions with the theme "Open Road," which focuses on cloud, 5G, operation transformation, videos and consumer-oriented products. Its campaign has been recognized by three awards given by GSMA.
LRTV Custom TV
China Telecom NFV Infrastructure on RSD

4|6|17   |     |   (0) comments


Lynn Comp, senior director of market development of Intel, is joined by Chong Zhang, storage engineer at Inspur and Ou Li Yan, architect for technology strategies of China Telecom, for a discussion of what NFV brings.
LRTV Custom TV
Nokia's IMPACT Software Demo

4|6|17   |     |   (0) comments


Khamis Abulgubein of IoT market development at Nokia demonstrates IMPACT (intelligent management platform for all connected things), a software solution with a horizontal approach to managing any device on any application.
Upcoming Live Events
May 15-17, 2017, Austin Convention Center, Austin, TX
May 15, 2017, Brazos Hall - Austin, TX
May 15, 2017, Austin Convention Center - Austin, TX
June 6, 2017, The Joule Hotel, Dallas, TX
All Upcoming Live Events
Infographics
With the mobile ecosystem becoming increasingly vulnerable to security threats, AdaptiveMobile has laid out some of the key considerations for the wireless community.
Hot Topics
Time for a Telecom Reboot
Steve Saunders, CEO and founder, Light Reading, 4/19/2017
Surprise! AT&T Markets 4G Advances as '5G Evolution'
Dan Jones, Mobile Editor, 4/25/2017
Did Verizon Outbid AT&T for Straight Path?
Dan Jones, Mobile Editor, 4/25/2017
First Year TIPs the Scale Toward Success
Denise Culver, 4/24/2017
Unlicensed: It's What's Next for US Mobile Operators
Dan Jones, Mobile Editor, 4/19/2017
Like Us on Facebook
Twitter Feed
BETWEEN THE CEOs - Executive Interviews
One of the nice bits of my job (other than the teeny tiny salary, obviously) is that I get to pick and choose who I interview for this slot on the Light Reading home ...
TEOCO Founder and CEO Atul Jain talks to Light Reading Founder and CEO Steve Saunders about the challenges around cost control and service monetization in the mobile and IoT sectors.
Live Digital Audio

Playing it safe can only get you so far. Sometimes the biggest bets have the biggest payouts, and that is true in your career as well. For this radio show, Caroline Chan, general manager of the 5G Infrastructure Division of the Network Platform Group at Intel, will share her own personal story of how she successfully took big bets to build a successful career, as well as offer advice on how you can do the same. We’ll cover everything from how to overcome fear and manage risk, how to be prepared for where technology is going in the future and how to structure your career in a way to ensure you keep progressing. Chan, a seasoned telecom veteran and effective risk taker herself, will also leave plenty of time to answer all your questions live on the air.