Hackers of India

Telecom Security Challenges in 5G

By  Akib Sayyed  on 05 Mar 2021 @ Nullcon

Presentation Material

Abstract

Indian Telecom Sector is gearing up for launching 5G in India. 5G dramatically increases bandwidth capacity and it’s proved as technological disruptors of the decade. 5G is going to impact every aspect of life. But as there new technology emerges real-world problems emerge too. I will be presenting about changes in 5G concerning the flaws of legacy technologies. Security improvement in 5G. Challenges operator will face while implementing 5G. Zombie Cellphone Attacks which could help hackers in performing DDOS on different targets. As Virtualization is the backbone of the 5G network core, I will explain what problem telco may face concerning 5G Core virtualization. I will also be explaining security considerations that need to be addressed such as virtualization, Automation, orchestration. In the end, I will explain GSMA Initiative called NESAS (Network Equipment Security Assurance Scheme)

AI Generated Summarymay contain errors

Here is a summary of the content:

Topic: 5G Network Security Testing and Assurance

Key Points:

  1. The speaker emphasizes the importance of testing and assurance in 5G networks, citing vulnerabilities that need to be addressed.
  2. GSMA’s NISSA (Network Equipment Security Assurance Scheme) initiative is mentioned as a compliance check for network elements based on CGPP documents.
  3. Multiple vendors, including Nokia, Ericsson, ZTE, Huawei, are participating in NISSA testing.
  4. Indian telecom stack vendors are encouraged to participate in NISSA testing to demonstrate their products’ security and reliability.
  5. The speaker answers questions from the audience:
    • 5G encryption is implemented at multiple layers, including over-the-air signaling protocols and end-to-end encryption for user data.
    • There is no interface management mechanism like ZC sequence mentioned.
    • For testing 5G networks, a list of required hardware includes SDR frequency range support, with an estimated budget of $6,000 to $8,000.

Call to Action:

The speaker invites the audience to contact them at as.metricshield.com and announces an upcoming free webinar series on telecom security topics.