Thursday, 31 October 2019 07:45

UK delays decision on Huawei Featured

By

The UK’s National Security Council has delayed a decision on whether Chinese telco giant Huawei’s equipment will be cleared for use in the country’s 5G Network. An announcement was expected this week, but has been postponed indefinitely, a victim of the Brexit paralysis.

Right now the UK is still a member of the European Union. As such it is party to guidelines the EU is determining for assessing the risk of 5G networks.

The process is the result of a European Commission Recommendation adopted in March 2019 to ensure a high level of cyber security of 5G networks across the EU. The most significant step to date has been the publication of a report on the EU co-ordinated risk assessment on cyber security in 5G networks.

The report, published on 9 October, is based on the results of the national cyber security risk assessments by all EU Member States, including the UK. It identifies the main threats and threats actors, the most sensitive assets, the main vulnerabilities (including technical ones and other types of vulnerabilities) and a number of strategic risks.

The next step was for member states to submit draft security guidelines, which will then be used to develop a "toolbox" of mitigating measures to address the identified cyber security risks at national and EU level. This will be released by the end of 2019. This is the process that the UK has now delayed, putting it out of step with other EU members.

The submissions from EU member states have been watched closely, in the light of the banning of Chinese vendor Huawei from 5G networks in the US and Australia. On 16 October, the German Bundesnetzagentur (Federal Network Agency) submitted its draft guidelines, which were widely interpreted as a go-ahead for Huawei because they said no company should be excluded on non-technical grounds.

Huawei has been very active in the development of 5G networks and planning in Europe. It has a major presence in Brussels, and two weeks ago hosted what it said was first ever vendor-sponsored official EU debate. The event drew more than 300 attendees. It was addressed by Abraham Liu, Huawei's representative to the European Union, and jointly chaired by four Members of the European Parliament, one from each of the major political blocs.

The 9 October EU report identifies a number of important security challenges in 5G networks, compared with the situation in existing 3G and 4G networks:

  • A increased exposure to attacks and more potential entry points for attackers. “With 5G networks increasingly based on software, risks related to major security flaws, such as those deriving from poor software development processes within suppliers are gaining in importance.”

  • Due to new characteristics of the 5G network architecture and new functionalities, certain pieces of network equipment or functions are becoming more sensitive, such as base stations or key technical management functions of the networks.

  • Risks related to the reliance of mobile network operators on suppliers. “This will also lead to a higher number of attacks paths that might be exploited by threat actors and increase the potential severity of the impact of such attacks. Among the various potential actors, non-EU nation states are considered as the most serious ones and the most likely to target 5G networks.” The report did not name them.

  • “In this context of increased exposure to attacks facilitated by suppliers, the risk profile of individual suppliers will become particularly important, including the likelihood of the supplier being subject to interference from a non-EU country.” The report did not mention by name Huawei or the USA or China.

  • “Increased risks from major dependencies on suppliers: a major dependency on a single supplier increases the exposure to a potential supply interruption, resulting for instance from a commercial failure, and its consequences. It also aggravates the potential impact of weaknesses or vulnerabilities, and of their possible exploitation by threat actors, in particular where the dependency concerns a supplier presenting a high degree of risk.”

  • Threats to availability and integrity of networks will become major security concerns: in addition to confidentiality and privacy threats, with 5G networks expected to become the backbone of many critical IT applications, the integrity and availability of those networks will become major national security concerns and a major security challenge from an EU perspective.

The writer visited Brussels as a guest of Huawei.

DIGITAL MARKETING HAS NO SOCIAL DISTANCING OR TRAVEL RESTRICTIONS

As part of our Lead Machine Methodology we will help you get more leads, more customers and more business. Let us help you develop your digital marketing campaign

Digital Marketing is ideal in these tough times and it can replace face to face marketing with person to person marketing via the phone conference calls and webinars

Significant opportunity pipelines can be developed and continually topped up with the help of Digital Marketing so that deals can be made and deals can be closed

- Newsletter adverts in dynamic GIF slideshow formats

- News site adverts from small to large sizes also as dynamic GIF slideshow formats

- Guest Editorial - get your message out there and put your CEO in the spotlight

- Promotional News and Content - displayed on the homepage and all pages

- Leverage our proven event promotion methodology - The Lead Machine gets you leads

Contact Andrew our digital campaign designer on 0412 390 000 or via email andrew.matler@itwire.com

CONTACT US!

LAYER 1 ENCRIPTION A KEY TO CYBER-SECURITY SOLUTION

Security requirements such as confidentiality, integrity and authentication have become mandatory in most industries.

Data encryption methods previously used only by military and intelligence services have become common practice in all data transfer networks across all platforms, in all industries where information is sensitive and vital (financial and government institutions, critical infrastructure, data centres, and service providers).

Get the full details on Layer-1 encryption solutions straight from PacketLight’s optical networks experts.

This white paper titled, “When 1% of the Light Equals 100% of the Information” is a must read for anyone within the fiber optics, cybersecurity or related industry sectors.

To access click Download here.

DOWNLOAD!

Graeme Philipson

Graeme Philipson is senior associate editor at iTWire. He is one of Australia’s longest serving and most experienced IT journalists. He is author of the only definitive history of the Australian IT industry, ‘A Vision Splendid: The History of Australian Computing.’

He has been in the high tech industry for more than 30 years, most of that time as a market researcher, analyst and journalist. He was founding editor of MIS magazine, and is a former editor of Computerworld Australia. He was a research director for Gartner Asia Pacific and research manager for the Yankee Group Australia. He was a long time weekly IT columnist in The Age and The Sydney Morning Herald, and is a recipient of the Kester Award for lifetime achievement in IT journalism.

VENDOR NEWS & EVENTS

REVIEWS

Recent Comments