Securing IoT in a 5G World
Ask ten industry experts how 5G will impact their life and you’ll get ten different answers, as each of them are using the technology in different ways. For auto manufacturers, it’s all about connected vehicle technology. Telecommunication companies are preparing for the next generation of mobile devices, while the healthcare industry is preparing to embrace new technologies such as telemedicine. Even with different goals, however, one thing is for certain: they are all connected to a rapidly expanding Internet of Things (IoT).
The increased demand for connectivity and 5G network-enabled IoT devices is causing device vendors to rush to be first to market, clamoring for dominance in a relatively new, untapped market. This wave of competition may push some vendors to sacrifice security testing for speed, allowing potential vulnerabilities to remain hidden in the backend of devices. While we hope vendors will take their time and ensure security vulnerabilities are tested, the addition of thousands of new devices provides an opportunity for malicious online parties and threat actors to penetrate the market with greater force.
Once a threat actor has access to a device, they may use lateral movement to access other devices that would usually be inaccessible. The expansion of 5G networks will allow more options for access, and because the technology is so new, it will take time for device vendors to identify how they can combat exploited vulnerabilities and secure the network.
For example, penetration testers were performing the first protocol downgrade attacks in 4G LTE ten years ago. At the lowest level, these attacks carried serious consequences and exposed flaws, allowing threat actors easy access to a network. Although 5G networks will have stronger security protocols than 4G, it is still possible for flaws to be inherited and for even simple attacks to have significant effects.
As businesses move into the 5G era, the most important thing to understand is that any IoT device connected to a network can be vulnerable to cyberattacks. This includes cell phones and laptops, but also extends to more simple devices such as Wi-Fi-enabled picture frames or other smart home devices like televisions. Unfortunately, simple devices like photo frames often run on older versions of operating systems with well-known flaws and applicable exploits. These devices may look innocent sitting on a colleague’s desk but become a vulnerable endpoint if connected to the network.
