Security implications in the fast-paced expansion of national mobile network infrastructure

Mobile networks play a large role in today's society. Since their inception in the 1980s, these networks have seen continuous expansion, with global telecom manufacturers competing to deliver the most advanced, cost-effective solutions. Well-defined standards like GSM have contributed to fast-paced growth, enabling competition without sacrificing interoperability.

The next generation of mobile networks (5G) is steadily making its mark on society. With more aspects of life relying on interconnectivity—be it smartphones, industrial controllers, self-driving cars, or healthcare systems—it is critical that the backbone enabling such progress is secure, robust, and reliable.

Politics and national interests play a significant role in decision-making around national infrastructure. Mobile networks, being a prime object of interest, are no exception. Providers may seek to increase profit margins, potentially compromising security. Governments, increasingly aware of the need to protect society in both physical and cyber realms, must focus on safeguarding these essential networks.

This post provides an overview of mobile network infrastructure from a security perspective, highlights the improvements 5G offers, and discusses the geopolitical context surrounding its deployment. Lastly, it explores potential solutions for fast-paced mobile network expansion.

Mobile Network Infrastructure – A Security Perspective

Mobile network technology and standards have historically struggled to catch up with security challenges. Over the last two decades, we have witnessed various high-profile security breaches in mobile communications. With the advent of 5G, securing networks has become even more crucial, particularly as countries evaluate transitioning critical infrastructure to these systems.

Weak Encryption Ciphers

One early notable vulnerability was the A5/1 stream-cipher used in GSM communication, which was cracked via reverse engineering. An even weaker variant, A5/2, was later shown to be decryptable in real-time, leading to its removal from standards in 2007. However, downgrade attacks, which force devices to use less secure encryption, remained a serious issue.

IMSI-Catchers

IMSI-catchers, devices that mimic mobile base stations to intercept communications, have been widely used by governments and criminals alike. These tools exploit vulnerabilities in 2G and, despite improvements in 3G and 4G, remain a threat. The introduction of mutual authentication in 3G improved security, but downgrade attacks still allowed adversaries to exploit earlier-generation vulnerabilities.

Downgrade Attacks

The ability of fake base stations to force a device to downgrade its communication protocol is a significant issue. With 4G/LTE, improved security features have been introduced, but vulnerabilities still exist. Denial-of-service attacks on LTE networks can force devices to downgrade to 3G or 2G, exposing them to older, less secure standards.

The Future of Mobile Networks (5G)

5G promises a revolutionary shift in mobile network technology, enabling a massive Internet of Things (IoT) ecosystem. There are five core technologies that distinguish 5G from its predecessors:

1. Millimeter Waves: Allows data to be transferred at speeds up to 10 times faster than 4G/LTE. However, it requires a near-perfect line of sight and struggles with long-distance propagation.
2. Small Cell Networks: Low-cost, low-complexity base stations that facilitate high-speed data transfer by operating in closer proximity to devices.
3. Massive MIMO: An upgrade from current MIMO technology, allowing many more antennas to increase capacity.
4. Beamforming: Directs signals in specific directions to avoid interference, improving communication quality and reliability.
5. Full Duplex: Allows transmission and reception on the same frequency, though this technology is still in development.

Beyond these advancements, 5G introduces Software Defined Networking (SDN) and Network Function Virtualization (NFV), bringing new levels of flexibility and scalability to mobile network architecture.

The Major Players

Several companies are leading the race to dominate 5G infrastructure development:

• Huawei: The largest player, with substantial investments in 5G research and development. Huawei's end-to-end 5G stack and competitive pricing have made it a key player, though its ties to the Chinese government have raised security concerns.
• Ericsson: A close competitor to Huawei, Ericsson has secured multiple 5G contracts and is working with Qualcomm to develop a complete solution.
• Samsung: Known primarily for its consumer electronics, Samsung has also become a major 5G infrastructure vendor.
• Nokia: With its “Future X” solution, Nokia offers a comprehensive 5G system, though it is currently trailing behind Huawei and Ericsson in contract count.
• Qualcomm: Known for its advanced modem technology, Qualcomm is heavily involved in 5G research and development.

The U.S. Tech Cold War

The ongoing tension between the U.S. and Huawei has created a geopolitical battleground in the tech space. Concerns over espionage and security risks have led to restrictions on Huawei in the U.S., while the company seeks to expand into European markets. U.S. officials have warned allies against adopting Huawei technology, citing potential security risks.

European Commission 5G Risk Assessment

The European Union has published a risk assessment highlighting concerns about supplier dependency and the security of critical infrastructure. The report recommends reducing reliance on non-EU suppliers and strengthening the European telecommunications industry to mitigate risks associated with 5G deployment.

Conclusion

5G represents the future of mobile communication, promising to enable new technologies and services with high-speed, low-latency connections. However, the security challenges it presents must be carefully managed. A regulatory body overseeing the deployment of 5G networks, as proposed in Germany, could help ensure that security remains a priority, while enabling countries to maintain healthy political and trade relationships.

Following the European Commission's recommendations to reduce dependency on single suppliers and strengthen domestic industries will be crucial for a secure 5G future.