NSN Donates to the OpenSSL Project
ESPOO, Finland -- Nokia Solutions and Networks, the world’s leading mobile broadband specialist, today pledged to help the OpenSSL Project in its fight against future vulnerabilities similar to the ‘Heartbleed’ bug through a substantial donation, to be made over two years as their first Platinum sponsor. NSN will also provide the support of its Mobile Broadband Security Center facilities.
NSN is taking the industry lead in highlighting the need for enhanced telco security, as shown by its plans to launch a Mobile Broadband Security Center in Berlin. NSN will utilize these security facilities to help safeguard both customers and the mobile network industry and to support further strengthening of the important cryptographic functionality of such software.
“We see protecting mobile broadband networks as a top priority and believe that best-in-class security can be achieved by combining the forces of market-leading experts,” said Hossein Moiin, executive vice president of Technology & Innovation at NSN. “We are donating to the Foundation and will contribute with our expertise via our Security Center in Berlin.”
“The OpenSSL Project welcomes NSN’s support in helping prevent issues like ‘Heartbleed’ from recurring,” said Steve Marquess at the OpenSSL Software Foundation. “This is by far our largest donation to date, highlighting NSN’s position as an industry leader in safeguarding security.”
The ‘Heartbleed’ bug, discovered on April 7, is a flaw in OpenSSL, the most popular cryptographic software used by about two-thirds of websites to secure data on the internet, enabling hackers to steal information. NSN has assessed its own portfolio in depth for OpenSSL ‘Heartbleed' vulnerability and is finalizing plans to roll out the required updates for the small number of products where potential vulnerabilities were identified. NSN is also now implementing a centralized team to ensure robust security is baked in to all its development and execution processes and throughout its wide Mobile Broadband portfolio.
With its donation, NSN wants to express its gratitude to the OpenSSL Project for providing the leading open source cryptography library used across the industry. To contribute to this community, NSN has already offered its industry-leading Certificate Management Protocol (CMP) client implementation to be integrated into the library. CMP is a security cornerstone of modern LTE networks, and the client implementation provided by NSN is the only usable out-of-the-box example available under a free and open source license.