The U.S. National Security Agency (NSA) , along with the Cybersecurity and Infrastructure Security Agency (CISA) and the Office of the Director of National Intelligence (ODNI) , are analyzing the potential risks and vulnerabilities posed by the implementation of 5G networks in a report. Representatives from the IT, communications, and defense industrial base sectors also contributed to the report, titled “Potential Threat Vectors to 5G Infrastructure . ”
Inadequate implementation of telecommunications standards, infrastructure weaknesses, and supply chain threats could create significant cybersecurity risks to networks . The analysis provides a list of known and potential threats to these networks, scenarios for the adoption of 5G technologies, and also assesses the risks to key 5G technologies.
Read also: Everything about 5G, in COSMOTE's original mini-documentary series
Improper definition and incorrect implementation of 5G policies could cause serious risks. For example, states that contribute to drafting them could try to influence standards for the benefit of their proprietary technologies. In other cases, states could not define optional control elements, which are not implemented by operators.
The report also highlights the risks to the 5G supply chain, such as the introduction of malicious software and hardware, counterfeit components, poor designs, manufacturing processes, and maintenance processes.
See also: Huawei: 6G is 50 times faster than 5G and is coming in 2030
Specifically, the report notes the following: “Exposure to these risks is being increased by the widespread ‘fascination’ of 5G technologies and the subsequent rush to deploy. This could have negative consequences, such as data and intellectual property theft, loss of trust in the integrity of the 5G network, or exploitation that will cause system and network damage.”
Experts also warn of vulnerabilities in the 5G architecture that could be exploited by hackers as attack vectors. 5G system architectures use an increasing number of ICTs designed to meet the growing data, capacity and communication demands. Both old and new vulnerabilities could be exploited by malicious actors to monitor, manipulate, disrupt and destroy important data.
Proposal: Security is vital as 5G becomes more widely available
Finally, the report highlights the following: “These threats and vulnerabilities could be exploited by malicious actors, which would have a negative impact on organizations and users. Without a continued focus on 5G threat actors and early identification of weaknesses in the system architecture, new vulnerabilities will increase the impact of cyberattacks. Organizations and communications providers that choose not to implement optional security controls will likely have more vulnerabilities and be at greater risk of cyberattacks. In these cases, state hackers who have contributed to the development of security controls or are aware of the weaknesses in systems that have not implemented them can target these entities. Therefore, malicious actors could identify and use methods to take advantage of private networks that do not implement these optional controls.”
Information source: securityaffairs.co
