Mobile Security: understanding the infrastructure and threats in a mobility ecosystem

1. Security
in
an
LTE
Environment
Neil
Cook,
Chief
Technology
Officer,
Cloudmark
Peter
Zuong,
Head
of
Technology,
Security
and
Privacy,
Ericsson

2. Agenda
LTE
security
differences
Impact
of
LTE
on
mobile
network
security
QuesHons
and
Answers
Panel
discussion
2
3
4
5
LTE
global
expansion
and
trends
1

3. Agenda
LTE
security
differences
Impact
of
LTE
on
mobile
network
security
QuesHons
and
Answers
Panel
discussion
2
3
4
5
LTE
global
expansion
and
trends
1

4. European Summit 2013: Enabling innovation, driving profitability
© Analysys Mason Limited 2013
Global LTE Outlook
LTE
is
spreading
around
the
globe,
thanks
to
flexible
spectrum
uHlizaHon,
and
MBB
services
4
▪ By
the
end
of
2013,
there
were
over
200
million
LTE
connecHons
world-­‐wide,
accounHng
for
just
3%
of
total
mobile
connecHons.
Total
LTE
connecHons
will
reach
1.5
billion
by
2018.
▪ Emerging
Asia
Pacific
is
set
to
become
the
dominant
world
LTE
market,
with
its
420
million
connecHons
accounHng
for
27%
of
LTE
connecHons
globally
by
2018.
▪ Only
11%
of
that
region’s
connecHons
will
have
migrated
to
LTE,
as
so
there
will
sHll
be
considerable
un-­‐tapped
potenHal
for
further
take-­‐up
of
LTE
in
that
region.
2013

5. Mobile
Security:
Threat
overlay
on
mobility
ecosystem

6. 1
The
United
States
is
the
world’s
largest
market
for
LTE
phones
and
LTE
tablets,
but
China
will
catch
up
very
quickly
in
2014
/
2015.
SUMMARY
:
Conclusions
2
Wearables
are
emerging
into
a
100-­‐
million-­‐plus
unit
global
market,
led
by
fitness
bands
and
smart
watches.
Samsung
is
likely
to
lead
the
global
LTE
smartwatch
market
in
2014.
3
LTE-­‐Advanced
(4.5G)
is
emerging
in
South
Korea.
It
will
be
a
100-­‐million
unit
smartphone
market
worldwide
and
in
Japan
by
2015
/
2016.
TD-­‐LTE
also
emerging
fast
in
2014.

7. Agenda
LTE
security
differences
Impact
of
LTE
on
mobile
network
security
QuesHons
and
Answers
Panel
discussion
2
3
4
5
LTE
global
expansion
and
trends
1

8. LTE
Security
Differences:
No
E2E
EncrypHon
Mobile operators have become so used to world-class network security being
baked in to their network infrastructure that many executives in these companies
tend to just assume it is there. When they initially rolled out 3G, for example, there
was one single, seamless instance of 3GPP encryption all the way from the
handset to the base station and on, deep in the network, to the RNC. Moreover,
the E1 or DS1 pipes between the base station and the RNC were based on TDM, a
highly-robust, highly-secure telecom grade networking technology.
Figure 1: Encryption in 3G & LTE Networks
Source: Heavy Reading

9. LTE
Security
Differences:
All
Links
are
IP
• Aiacker
can
gain
access
at:
– Cell
Site,
S1,
X2
Interfaces
– And
see
all
traffic
that
is
not
applicaHon-­‐encrypted
• No
RNC
thus
no
central
control
point
• Increase
in
small
cells
leads
to
increased
security
concerns
– No
physical
security
for
small
cells
– Simple
network
tap
to
access
all
data

10. Agenda
LTE
security
differences
Impact
of
LTE
on
mobile
network
security
QuesHons
and
Answers
Panel
discussion
2
3
4
5
LTE
global
expansion
and
trends
1

11. How
LTE
Networks
Impact
MNO
Security
11
4G
/
LTE
More
Bandwidth
&
Capacity
Data-­‐Centric,
Connected
Devices
All-­‐IP
Network
Evolving
Aiackers
• Enables
DDOS,
spam
relaying,
and
other
aiacks
• Reduces
cost
to
send
spam
• Open
environment
and
protocols
increase
vulnerability
to
threats
• Easier
to
hack
than
SS7
• Power
compuHng
devices
vs.
feature
phones
environment
• Can
be
hacked,
spoofed,
and
harnessed
to
run
botnets
• Danger
of
IP
blacklisHng
• Much
more
skilled
at
IP
aiacks
than
voice
oriented
networks
• Airacted
to
scale
and
scope
of
environment

12. Top
Messaging
Security
Challenges
with
LTE
12
LTE
allows
aiackers
to
send
more
spam,
faster
than
ever
before
LTE
driving
email,
MMS,
IMS-­‐based
messaging,
OTT
messaging,
VoIP
calls,
social
network
messaging,
M2M
communicaHons
and
evolving
protocols
“Every
spam
received
over
[mobile
messaging]
by
our
customers
is
a
potenHal
reason
for
them
to
switch
to
OTT
messaging”
–
Tier
I
Mobile
Operator
in
US
Stop
new
spam
and
messaging
aiacks
Protect
across
mulHple
protocols
Manage
threats
from
OTT
players
How
Can
Mobile
Network
Operators…

13. Agenda
LTE
security
differences
Impact
of
LTE
on
mobile
network
security
QuesHons
and
Answers
Panel
discussion
2
3
4
5
LTE
global
expansion
and
trends
1

14.
Statements
For
Discussion

15.
AdopHon
of
LTE
will
force
operators
to
decide
between
network
versus
consumer.

16.
Mobile
Operators
will
implement
security
to
protect
their
network
but
consumers
will
not.

17. Growth
in
video
consumpHon
in
an
LTE
environment
will
have
a
profound
effect
on
network
security.

18.
Mobile
malware
has
or
has
not
taken
off
the
way
we
thought
it
would.

19.
The
adopHon
of
LTE
presents
an
onslaught
of
privacy
concerns
and
the
mobile
operator
will
be
held
accountable.

20. LTE
will
give
operators
an
intelligent
network
allowing
them
to
offer
value
added
services
to
subscribers
and
3rd
party
vendors.
Security
will
or
will
not
be
important
in
this
process.

21. LegislaHve,
legal
and
regulatory
acHvity
are
are
making
an
impact
on
mobile
security.

22. Agenda
LTE
security
differences
Impact
of
LTE
on
mobile
network
security
QuesHons
and
Answers
Panel
discussion
2
3
4
5
LTE
global
expansion
and
trends
1