& cplSiteName &

Nokia's Efforts to Lead in Security

Patrick Donegan

You get a sense of the challenge facing traditional telecom vendors in network security when you look at the financial results of some of the leading names in this space. Juniper, once a trail-blazer in security, just rounded off a terrible year for its security business, reporting fourth-quarter 2016 security revenues down 30% compared with a year earlier.

Meanwhile Check Point Software Technologies Ltd. (Nasdaq: CHKP), one of the market's strongest performers, has been widely lauded for growing revenues by 7% in 2016 compared with 2015.

There may be a consensus that cybersecurity is the number one issue for businesses in 2017 but converting fear of cyber threats into orders for security hardware and software is still hard work, even for the best of vendors.

Against this commercial background, Nokia Corp. (NYSE: NOK) has distinguished itself from its peers in being willing to make a strategic push around mobile network security. And last Friday, the company invited some industry analysts to Helsinki to update them on the company's strategy.

The big takeaway for me was that there is no let-up in Nokia's strategic emphasis on security. At the same time there's also no sign of any specific turbo-boost in the pipeline. The roadmap is being worked on to ensure that the leadership it has established relative to Ericsson AB (Nasdaq: ERIC) and Huawei Technologies Co. Ltd. is maintained. It seems to me that the gap is still significant. But it's still not so great that either of its main rivals couldn't close it with a year or two of investment and supporting organizational realignment.

Let's start with LTE security. Nokia was early to ship eNode Bs with PKI certificates pre-installed and early with its own PKI certification authority. It was also quick to resell Juniper Networks Inc. (NYSE: JNPR)'s SRX platform for a Security Gateway (SeG) that could do the basic decryption of S1 traffic at the hand off to the core as well as support firewalling and other security features at that interface.

The update here is that post-Alcatel-Lucent acquisition, the positioning of the former Alcatel-Lucent 7750 Service Router as Nokia's new LTE SEG (security gateway) platform is well underway. Nokia claims to be number one in LTE security: Given the high concentration of LTE security deployments Europe, and given that Nokia was first to market with an end to end solution, the claim is certainly plausible.

Just as interesting, though in a different way, is the company's claim to be number one in Gi Firewall deployments. Nokia claims more than 70 deployments here, including some where it has been contracted to implement the Gi Firewall in front of the mobile packet core or EPC of other vendors.

Let's consider Nokia's "70" number for a moment. There are more than 700 mobile operators worldwide, which means Nokia is claiming market leadership having deployed at less than 10% of the total addressable market. Forget for a minute whether Ericsson, Cisco Systems Inc. (Nasdaq: CSCO) or Huawei have deployed more or less Gi Firewalls than Nokia: The striking thing about Nokia's number to me is what is says about the number of mobile operators worldwide that are still running their mobile packet core or EPC without any Gi Firewall at all.

That there are some doesn't come as a surprise -- I've heard it before and Nokia reaffirmed it on Friday. But that it could be a lot more than just "a few" -- i.e. by implication, it could easily be as many as one in three -- came as a surprise to me. What are these operator folks thinking, exactly? Let me guess: "It won't happen to me"?

Sales of Nokia's NetGuard network-based mobile malware detection solution sound as though they remain sluggish rather than spectacular, with a couple of Tier 1 operators in each major region reportedly using it now. Being focused on helping mobile operators detect and remediate malware once it's already made it onto a smartphone, Nokia doesn't generate the same headlines as security vendors that compete to be first to discover new malware.

But the fact that Nokia's tracking of mobile malware infection rates -- based on seeing hundreds of thousands of mobile malware samples -- is showing an upward trend worldwide aligned with what CTIA reports seeing in the US is something with which few other vendors can compete. Additionally, NetGuard customers benefited from its warning of a big increase in brute force auditing against Telnet servers during the early part of the fall of last year. According to Nokia, it was only subsequently that the Mirai botnet that carried out the attacks on Dyn was identified as the probable cause of that surge.

Consistent with Nokia's targeting of the IoT market, NetGuard is being evolved as the security module for its IMPACT platform for IoT. (See Nokia Aims for Big IMPACT in Enterprise IoT.)

I suspect "slow-ish" rather than "spectacular" also accurately describes sales of Nokia's SS7 security solution, if only because this is still a very nascent market. Operators are initially interested in monitoring what type of traffic is coming into their networks via their STPs (signal transfer points) before they decide exactly what -- if anything -- to do about it. My sense is that Nokia's play here is a flag in the ground targeting the legacy SS7 protocol but that this may serve as a platform from which a more ambitious security solution could evolve over time, potentially targeting newer protocols such as Diameter.

The analyst event was held in conjunction with the Nokia Hackathon. This year, around 150 hackers participated in taking a crack at breaking into Nokia's own network infrastructure as well as that of its operator customer, Elisa Corp. . This was around twice as many as last year's event. The goal is to serve up products with fewer vulnerabilities as well as shorten product development cycles.

Another Nokia Hackathon will be held in the US later this year. The company is also working on resourcing an ongoing bug bounty program for rewarding those that identify vulnerabilities in its products. This is increasingly common in the B2C worlds: I suspect Nokia will be among the first telecom network infrastructure vendors to introduce one in the B2B context.

There were a number of other indicators of strategic intent during the day in the areas of DDoS protection, vulnerability management and IoT security that I'll be watching out for in future.

When the bar is set so low by its peers, it's difficult to avoid being moved by the positives of Nokia's approach to network security. But there are criticisms to be made. For example, except for leveraging it for the new SEG platform, the new router side of the Nokia house doesn't feature prominently enough in the company's security vision for my taste.

There's potential for mainstream network routers to take on a greater role in security policy enforcement in more software programmable telecom networks. Juniper already has a reasonably well developed story here. Nokia could potentially do with one too (or at least an explanation of why this isn't a roadmap the company buys into).

Moreover, many of those same mobile operators that take delivery of an SEG based on the 77XX will already have other physical and virtualized iterations of the same platform deployed throughout their network, including as a cell site gateway. There are opportunities to leverage the 77XX series for security, such as by dropping malicious traffic at the cell site as well as having it apply decryption and other security policies as an SEG deeper in the network.

I've no doubt some of Nokia's folks are thinking about these kinds of things. And yes, perhaps it was too early to talk about them on Friday. All the same I can't help thinking that even some small mention of some kind would help bring all of the company's potential security assets together in a more rounded way. Watch this space -- I will.

— Patrick Donegan, Founder & Principal Analyst, HardenStance

(1)  | 
Comment  | 
Print  | 
Newest First  |  Oldest First  |  Threaded View        ADD A COMMENT
User Rank: Light Beer
2/17/2017 | 4:27:12 AM
Good for Nokia
I heard that Nokia has been steadily declining for some time now, the market being taken by some other providers. It's good to hear that they are still in the game. The first phone I bought was actually a Nokia and though I have upgraded so many times since then - it still works :) That's quality!
More Blogs from Column
The systems and processes used for assuring networks services and business models will need to be updated to support telco cloud and virtualization strategies.
Private investment is essential if the US is to reach its broadband goals, particularly for connecting rural America, writes former Congressman Rick Boucher.
Operators want to take advantage of cloudification, but the communications network is not the data center so they need to bridge the gap between the network and the cloud.
Is the current virtual reality customer experience equivalent to the significant investment?
With flexibility and speed becoming increasingly important in service development, microservice capabilities are attracting increasing attention.
From The Founder
Cisco's Conrad Clemson, recently promoted to head up the company's Service Provider Apps & Platforms developments, talks to Light Reading's Founder and CEO Steve Saunders about how he's bringing cloud video, mobile and virtualization together to empower network operators.
Flash Poll
Live Streaming Video
Charting the CSP's Future
Six different communications service providers join to debate their visions of the future CSP, following a landmark presentation from AT&T on its massive virtualization efforts and a look back on where the telecom industry has been and where it's going from two industry veterans.
LRTV Custom TV
What WTTX Can Deliver

2|23|17   |     |   (0) comments

Mohamed Madkour explains the benefits of WTTX while Dimitris Mavrakis discusses the challenges of delivering home broadband access.
LRTV Custom TV
Huawei on Mobile Broadband

2|23|17   |     |   (0) comments

Mohamed Madkour shares his vision on MBB for the next three years.
LRTV Custom TV
Analysys Mason Talks About the Future of Digital Operations

2|23|17   |     |   (0) comments

The future of digital operations has three key aspects: 1. Highly automated operations for both service and network; 2. Highly converged BSS/OSS for business and resources; 3. Highly merged management and control for real-time cloud native operations.
LRTV Interviews
Software Trends in the Telecom Sector

2|23|17   |   03:40   |   (0) comments

Heavy Reading senior analyst James Crawshaw talks with Telecoms.com Editorial Director Scott Bicheno about trends and developments in the telecoms software sector and what to expect at MWC 2017.
LRTV Custom TV
Huawei's Pre-MWC Analyst Briefing 2017 Highlights

2|22|17   |     |   (0) comments

Huawei shares its vision for this year's MWC.
LRTV Interviews
MWC17: 5G, Cloud RAN & More

2|21|17   |   04:35   |   (0) comments

Ovum Senior Analyst Julian Bright talks to Scott Bicheno from Telecoms.com about all things MWC, including Cloud RAN, Huawei's pitch to the industry and the road to 5G.
LRTV Interviews
MWC 2017's Key 2-Letter Terms

2|20|17   |   08:29   |   (1) comment

5G, AI, VR... these are just some of the two-letter terms that will dominate show-floor chat at MWC 2017 in Barcelona, according to these two blow-hards (a.k.a. Scott Bicheno of Telecoms.com and Light Reading's Ray Le Maistre). And then there's PB...
LRTV Interviews
Key Trends for Mobile Operators in Developing Markets

2|20|17   |   06:37   |   (0) comments

Ovum's Matthew Reed talks to Scott Bicheno from Telecoms.com about the challenges and opportunities facing mobile operators in the developing markets of Africa and the Middle East.
LRTV Documentaries
YouTube Takes on Facebook Live-Streaming

2|17|17   |     |   (0) comments

Popular 'YouTubers' will be the first to get the new service on their smartphones. You have been warned.
LRTV Custom TV
Open Source NFV/SDN Automation

2|17|17   |   05:54   |   (0) comments

AT&T ECOMP (Enhanced Control, Orchestration, Management and Policy) code is transitioning into the Linux Foundation for placement into open source. In this video, Carol Wilson provides an update on the maturation of open source ECOMP and meets with industry leaders from AT&T, Bell Canada, Orange, Linux Foundation and Amdocs to discuss what this means for the ...
LRTV Documentaries
Uber & NASA Collaborate on Flying Car Project

2|16|17   |     |   (0) comments

Is Uber for real? Well, it's hired NASA engineer Mark Moore to lead the project, and he wouldn't come cheap.
LRTV Documentaries
Zuckerberg Tries Out the Oculus Rift VR Glove

2|15|17   |     |   (0) comments

Facebook CEO shows off a new way to interact with the Oculus Rift virtual reality headset: an Oculus glove.
Upcoming Live Events
March 21-22, 2017, The Curtis Hotel, Denver, CO
March 22, 2017, The Curtis Hotel, Denver, CO
March 22, 2017, The Curtis Hotel, Denver, CO
May 15-17, 2017, Austin Convention Center, Austin, TX
May 15, 2017, Austin Convention Center - Austin, TX
June 6, 2017, The Joule Hotel, Dallas, TX
All Upcoming Live Events
With the mobile ecosystem becoming increasingly vulnerable to security threats, AdaptiveMobile has laid out some of the key considerations for the wireless community.
Hot Topics
Broadband Has a Problem on the Pole
Mari Silbey, Senior Editor, Cable/Video, 2/21/2017
Uber's HR Nightmare: Company Investigates Sexual Harassment Claims
Sarah Thomas, Director, Women in Comms, 2/21/2017
Is the Time Right for a Cisco/Ericsson Wedding?
Ray Le Maistre, Editor-in-chief, 2/17/2017
Verizon to Start Fixed 5G Customer Trials in April
Dan Jones, Mobile Editor, 2/22/2017
Nice to See at Least One CSP Taking My Advice
Mitch Wagner, Editor, Enterprise Cloud, 2/17/2017
Like Us on Facebook
Twitter Feed
BETWEEN THE CEOs - Executive Interviews
Light Reading founder and CEO Steve Saunders chats with Sportlogiq CEO Craig Buntin about sports data analysis.
Eyal Waldman, CEO of Mellanox Technologies, speaks to Steve Saunders, CEO of Light Reading, for an exclusive interview about the 100 GB cable challenge, cybersecurity and much more.
Animals with Phones
No One Likes This Click Here
Take a hint!
Live Digital Audio

Playing it safe can only get you so far. Sometimes the biggest bets have the biggest payouts, and that is true in your career as well. For this radio show, Caroline Chan, general manager of the 5G Infrastructure Division of the Network Platform Group at Intel, will share her own personal story of how she successfully took big bets to build a successful career, as well as offer advice on how you can do the same. We’ll cover everything from how to overcome fear and manage risk, how to be prepared for where technology is going in the future and how to structure your career in a way to ensure you keep progressing. Chan, a seasoned telecom veteran and effective risk taker herself, will also leave plenty of time to answer all your questions live on the air.