Cyber threats are growing in volume, intensity, and complexity and are here to stay. Basic endpoint attacks are becoming intricate, multi-stage operations. Cybercriminals are launching highly coordinated and advanced attacks. This evolving threat landscape affects businesses of all sizes, jeopardising data, operations, and finances.
In the face of massive data leaks, costly ransomware payments, and an ever-expanding and complex threat landscape, the need to strengthen digital defences has driven significant advancements in cybersecurity.
Read on to find out how organisations, governments, industry associations and technology providers are evolving ways to combat cybercrime.
Download ‘Securing the Future: Cyber Resiliency in the Digital World’ as a PDF
Last week AT&T announced a partnership with Fortinet to expand their managed security services portfolio. This partnership provides global managed Secure Access Service Edge (SASE) solutions at scale. The solution uses Fortinet’s SASE stack which unifies software-defined wide-area network (SD-WAN) and network security capabilities into AT&T managed cybersecurity framework. Additionally, AT&T SASE and Fortinet will integrate with AT&T Alien Labs Threat Intelligence platform, a threat intelligence unit to enhance detection and response. AT&T has plans to update its managed SASE service during the year and will continue to bring more options.
Talking about the AT&T-Fortinet partnership, Ecosystm Principal Advisor, Ashok Kumar says, “This move continues the trend of the convergence of networking and security solutions. AT&T is positioning themselves well with their integrated offer of network and security services to address the needs of global enterprises.”
Convergence of Network & Security
AT&T’s improved global managed security service includes features such as secure web gateway, firewall-as-a service, cloud access security broker (CASB) and zero-trust access, which provides security teams and analysts with unified capabilities across the cloud, networks and endpoints. The solution aims to enable enterprises to create a more resilient network bringing the core capabilities of the two companies that will reduce operational costs and deliver a unified offering.
Last year AT&T also partnered with Cisco to expand its SD-WAN solution and to support AT&T Managed Services using Cisco’s vManage controller through a single management interface. Over the past years multiple vendors including Fortinet have developed comprehensive SASE solution capabilities through partnerships or acquisitions to provide a unified offering. Last year Fortinet acquired Opaq, a SASE cloud provider to bolster their security capabilities through OPAQ’s patented Zero Trust Network Access (ZTNA) cloud solution and to strengthen SD-WAN, security and edge package.
The Push Towards Flexible Networking
Kumar says, “The pandemic has created a higher demand and value for secure networking services. Enterprises experienced greater number of phishing and malware attacks last year with the sudden increase in work-from-home users. The big question enterprises need to ask themselves is whether legacy networks can support their evolving business priorities.”
“As global economies look to recover, securing remote users working from anywhere, with full mobility, will be a high priority for all enterprises. Enterprises need to evaluate mobile SASE services that provide frictionless identity management with seamless user experiences, and be compatible with the growing adoption of 5G services in 2021 and beyond.”
The Top 5 Telecommunications & Mobility Trends that will dominate the telecom industry to watch out for in 2021. Signup for Free to download the report.
AT&T became the first North American operator to join the ranks of the Global Telco Security Alliance formed by Singtel, Etisalat, Softbank, and Telefónica. The alliance which was formed last year in April 2018 in a pact to amalgamate the capabilities of telecommunications operators on security aspects and fight collectively against cyber attacks.
AT&T joined as an equal member with other founding members of the group. Over the past few years, AT&T has been building its cybersecurity capabilities and has recently acquired AlienVault– a commercial and open source developer – to offer a platform that integrates and automates point security products to manage cyber attacks. AlienVault has been rebranded as AT&T Cybersecurity, and includes consulting and managed security services. Similarly, at the end of 2018, Singtel revealed the brand ‘Trustwave’ that combines the capabilities of partners such as Optus and NCS, to provide a comprehensive security suite and services to help organisations fight cybercrime.
With the rising risks of cyber-attacks, these initiatives are providing a synergistic front and helping organisations to analyse and act faster against cyber threats. The alliance plans to expand its global footprint and span across APAC, Europe, MEA and America.
Speaking about the alliance, Alex Woerndle, Principal Analyst Cybersecurity, Ecosystm says that, “Similar collaborations exists within other industries already – most commonly they use regular information-sharing sessions with the collective security teams to discuss what each is experiencing, what strategies and tactics have worked or failed, and provide details on the type and nature of attacks. The telcos – at a minimum – should be collaborating at that level. But given the global nature of this alliance, they will need to consider how they can aggregate threat information and share it in a more agile way on a day to day, hour to hour and minute to minute basis.”
The alliance accounts for a significant percentage of the overall traffic and is a tangible example of companies taking steps to fight cyber attacks. “As the threat landscape continues to expand there is an opportunity to broaden the intelligence – sharing what they collectively gather and analyse, to strengthen the defences of the broader market not just in their local geographies, and to impact globally”, says Woerndle. “Think of the immense opportunities to share intelligence gathered collectively by all the major telcos, to proactively prevent attacks on their clients – from other enterprises down to small/medium businesses and consumers. Law enforcement could benefit from the global telco collaboration, also”
When I wrapped up my visit to this year’s Mobile World Congress (MWC) in Barcelona, I had wondered if my pre-trip question of what would the 5G story be after several years of being told that each preceding year was ‘the’ year. However, this year had a very distinct vibe to it, and I was rewarded for my pilgrimage to the Grand Fira.
Let’s not forget that technology takes longer to roll out that all of us want to think and 5G is no different. We have had no excuses since we only have to look at how long it took 3G and LTE to become mainstream and how long the transition from the prior technology took to move to the next generation.
However, the mobile and telecom industry is not the same as it was when earlier telecommunication tech was being upgraded. In the past hardware, benchmarks feeds and speeds dominated the marketing messages, but now it is about software, cloud and ecosystem collaboration. Gone are the days when the telecom equipment vendors ruled the conversation about their technology – that has clearly been replaced by IT companies leading the charge with topics such as virtualization, IoT, analytics and new services. Once there was a US automobile commercial that touted the latest edition of its cars was ‘This is not your father’s Oldsmobile’. Well, 5G is not your father’s telecom infrastructure!
This time around, operator and equipment vendors may have to take the collaborative partner role in any new digital solution. Instead of 5G projects being dominated by Ericsson or Huawei for example, there is a role for the likes of VMware, Microsoft, and Salesforce to be the lead company. In some cases, it could be Bosch, PTC, or Siemens while in others it could be Audi, BMW or Mercedes. The overall trend here is that all of these companies are being digitally driven to deliver new services to a customer that is firmly at the center of an ecosystem. The one industry sector who might lose out could be the telco operators who could be squeezed by the surge from IT vendor relevance, despite them investing heavily on 5G licenses. However, this time the operators are in a much stronger position to be the perfect channel for the massive amount of intelligence-laden data being created by smart connected devices that are not typical mobile devices.
So what was the outcome at MWC? I visited both the Huawei and Ericsson booths following pre-MWC briefing sessions to see if the customer buzz was there – and indeed it was.
Ericsson may have won the prize for the most crowded booth, while Huawei’s sprawling booth wins the most lavish and largest booth. The two company’s 5G messages could not have been more different.
The Big Two
For me, Huawei had invested heavily in making its hardware products very compelling for operators to install. Clearly, there had been a lot of research had gone into replacing existing infrastructure with massive performance upgrades and deployment friendly attributes e.g. size and weight of base stations that could be mounted by individuals rather than by cranes. The result of this strategy is that Huawei’s customers can quickly deploy 5G platforms with lower CapEx and OpEx thus creating significant incentives for operators to migrate to 5G networks.
Ericsson’s leading story was about migrating to 5G by highlighting its key enablers (i.e. carrier aggregation, LTE-NR spectrum sharing, and dual mode 5G cloud core). It appeared that Ericsson had moved its message off hardware (which, by the way, is still table stakes in any selection process and Ericsson had plenty of new 5G related offerings) and onto a strategy of smooth evolution and deployment at scale – a much more business leader discussion than a network, driven by software. Finally, both companies had strong messages around their AI capabilities to help their service providers make sense of the growing complexity of services that will be generated by the connected smart IoT devices.
The Importance of IT Software On 5G
IT and industrial companies played an increasingly important role at this year’s MWC as service providers and they became involved in deeper partnerships. 2019 was the year when the gaps for 5G between the network and IT services were being filled in. For example, I saw AR (augmented reality) solutions by PTC supported by Microsoft and being fed by data off a 5G network. This showed how industry, cloud and network service providers will accelerate new technologies.
In another example, Salesforce showed how Edge Computing events triggered Salesforce SaaS-based enterprise management services while being supported by AT&T’s 5G network and the modules being designed and tested at AT&T’s Foundry. Here, AT&T 5G network was being used as a high-value channel for Salesforce’s customers to run their business functions at the edge of the network.
Digital twins have shown up as a digital representation of a physical device or asset. However, this year, I saw a Wipro example of how 5G could drive digital twin concepts beyond physical assets and into the workflow, supply chain management, logistics and worker safety. Every ‘asset’ that was to be used in a factory floor was digitized into a digital twin and then a 5G network was used to monitor and manage every aspect of the factory. It seemed that Industry 4.0 had arrived in its full glory.
Finally, VMware continues to be the IT company that service providers will either love or dislike – I still don’t know which one it will be. VMware’s virtualization and cloud management capabilities have been extended right into 5G networks. For example, NFV (Network Function Virtualization) is critical to operators as they slice the 5G bandwidth into the appropriate services. VMware has its strategy correct when it says that it could virtualize the network just as it has with the cloud, but in doing so is making itself either a partner or a competitor of the operators for their 5G services revenues. 2018 was the year when VMware made a big splash at MWC, 2019 was the year when they showed that they have something to offer – will 2020 be the year when they take over the network software virtualization profit pools just as they did with the enterprise server virtualization market?
Crawl, Walk, Run
In conclusion, MWC 2019 was the year that the 5G gaps to make end-to-end infrastructure solutions where clearly being filled in. Service providers had stepped up their willingness to be part of the customer-centric ecosystem that is almost certainly being led by IT software companies. Telecom equipment vendors were offering technology solutions to speed up 5G deployments while making forward compatible solutions much easier. Finally, 5G-supported applications remain the last piece of the puzzle that MWC hasn’t addressed fully. As a result of the massively varied 5G use cases, there is still a look of curiosity on which industry will be the lead for 5G – will it be the auto industry with autonomous cars, will it be Industry 4.0 and the smart factory, or will it be smart cities with video surveillance. In addition, it is certain that IoT is still very much a necessary part of any 5G strategy just as AI outcomes continue to fuel IoT-based sensors in technologies such as the self-driving cars, AR, and digital twins. 2019 may have been the year that decided that it won’t matter whether the connected IoT device used licensed (NB-IoT) or unlicensed (LoRa) spectrum protocols as both will be seamlessly connected to a 5G network. IoT was not dead, it had simply grown up and was now integrated with more valuable solutions.