What exactly is 5G security? Why is it critical?

2022.03.25

 In terms of architecture and protocols, 5G radio access networks (RANs) and 5G cores are very different from 4G LTE. For example, 5G RANs use new radio frequency (RF) protocols, offer a wider and higher band of spectrum, and have an open distributed architecture. New technologies always bring with them many concerns about their negative potential, and 5G is no exception. While there are many legitimate 5G safety concerns that need to be addressed and discussed, it is worthwhile to first clarify the false claim that 5G causes health problems. This is not the case - 5G technology is not harmful to humans. With that in mind, we'll discuss what 5G is, what security risks it faces, and how experts are working to ensure that 5G is safe. What is 5G? 5G stands for fifth-generation cellular mobile networks. In terms of architecture and protocols, 5G radio access networks (RANs) and 5G cores are very different from 4G LTE. For example, 5G RANs use a new radio frequency (RF) protocol, offer a wider and higher band of spectrum, and have an open distributed architecture. 5G core differences include SDN with control and user plane separation (CUPS) Decomposition provides more discrete control and orchestration capabilities Virtualization and microservices (i.e., containers) HTTP/2 (not GTP-C) control plane TLS 1.3 encrypted control plane Multi-Access Edge Computing (MEC). These represent significant changes - while in some cases they will hopefully help improve security, in other cases they may lead to more vulnerabilities or even lack of visibility. In addition, new 5G cores will be needed to help deliver on the expectations promised by 5G; high-band spectrum alone will not be enough to achieve this. 5G is expected to be approximately 100 times faster than current 4G networks, in part because these networks are built on the high-band rather than the mid-band. This speed increase will bring upgrades in everything from cloud robotics to healthcare. However, a major drawback of such low-latency networks is range and penetration. Lower power and higher frequency signals will not travel as far and will have difficulty passing through walls, which is why 5G may take longer to become a standard feature of most mobile device services. However, this lag in high-band adoption has one major advantage: experts have more time to find solutions to 5G security issues. Many of the factors that make 5G so appealing, such as reduced latency and increased bandwidth, are also threats to security. The following are some of the most prominent security threats. New technology - New advances in technology often mean new problems. Given that 5G is not only new, but also very different from 4G, it means that while experts can predict some security vulnerabilities, others may not become apparent until a breach has already occurred. More access points - 5G allows for more access points. Each additional hardware touch point creates another potential opportunity for an attacker to access the network. This means that all access points need to be monitored at both the physical and digital levels. Internet of Things (IoT) - The speed of 5G is ideal for use with IoT devices. That said, the increase in connected machines could also mean an increase in 5G security risks. Smaller IoT devices such as thermostats often have weak security, and a breach in one of them could mean the entire system is compromised. Speed - 5G is fast enough to be considered for remote surgery and self-driving cars, but it also means it may be more difficult to track and prevent attacks. At the same time, this critical and sensitive data transmission will require a higher level of security to avoid communication disruptions, malicious behavior, or snooping/stealing of information. Decomposed architecture - The decomposed architecture of 5G means that network functions are free to operate from the underlying system hardware, allowing for improved control and visibility. However, each of these components needs its own security measures, rather than relying on a single overarching security approach. Of course, these are only some of the risks to 5G security. Keeping services and connected devices secure is rarely (if ever) a 100% guarantee. 5G Security Solutions Despite the new and unique threats posed by 5G networks, there are already ways to help ensure better 5G security. Strengthen defenses against personal mobile and IoT devices Zero trust combined with a software security foundation End-to-end visibility Threat analysis. For optimal 5G security, the network should be treated as a zero-trust environment, and it cannot be assumed that connected devices will have adequate security or vulnerability protection. Therefore, the first step should be to ensure adequate visibility across the network through proper security monitoring, threat detection and mitigation processes, even before devices are connected to the 5G network. Keeping the 5G network secure will be a collective effort involving network providers, cybersecurity experts, and the customers themselves. As a second line of defense combined with zero trust, the software security foundation for mobile and IoT devices will need to be developed with network providers and cybersecurity companies. Even harmless IoT devices like smart refrigerators should be equipped with high-level security. More importantly, precautions should be taken to ensure that vulnerabilities in smaller IoT machines do not lead to unauthorized access to sensitive information. Second, end-to-end visibility is critical to monitoring any system. This is especially necessary in 5G security because there are so many access points available to malicious attackers. This monitoring should extend to all layers of the network, including physical network units and the data plane. Effective monitoring will also provide important information for understanding new attacks. Combined with mitigation procedures, this will provide a more effective defense against potential intrusions. Threat analysis is a valuable way to track and even predict attacks. Ideally, these analytics systems will be able to develop preventive measures to stop breaches from occurring. These procedures provide vital information in the ongoing process of protecting devices on a 5G network.