• Skip to main content
  • Skip to secondary menu
  • Skip to primary sidebar
  • Skip to footer
  • Our Services
  • Contact Us
  • Newsletter
  • Top Nav Social Icons

Mobile ID World

Mobile ID World

Identification Revolution

  • Mobile ID
    • What Is Mobile ID?
    • Identity Associations
    • Premier Partners
    • FAQ
  • News
  • Solutions
    • Behavioral
    • Facial Recognition
    • Fingerprint Biometrics
    • Iris Biometrics
    • Second Factor
    • Smart Cards
    • Smartphones
    • Vital
    • Voice
    • Wearable Tech
    • Other
  • Applications
    • Access Control
    • Cloud Technology
    • Commerce
    • Enterprise
    • Healthcare
    • Identification
    • Internet of Things
    • Law Enforcement
    • Strong Online Authentication
  • Exclusive
    • Interviews
    • Featured Articles
    • Podcasts
  • Companies
  • Events

NSA and CISA Call for ‘Device Identity’ in 5G Cloud Security

November 3, 2021

The US National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) are starting to put together a set of guidelines for tech companies that want to provide networking equipment and services in the future. To that end, the two agencies have released the first in a series of four planned reports that will refine the US government’s cybersecurity strategy moving forward.

NSA and CISA Call for 'Device Identity' in 5G Cloud Security

The first report comes courtesy of the Enduring Security Framework, which is itself a product of the Critical Infrastructure Partnership Advisory Council for threats and risks to national security systems. It specifically applies to cloud providers and mobile network operators, and details some best practices for security in a 5G environment. Most notably, the report stressed that multi-factor authentication is not sufficient, and that federal organizations need to guard against lateral threats that manage to bypass authentication protocols. Experts now believe that that may have occurred in the SolarWinds attack. Poor password hygiene is at least partly responsible for the initial breach, but the structure of the network itself may have allowed hackers to get around other security measures once one account was compromised.  

To solve the problem, the report argues that any device that is accessing a 5G network should have its own unique identity. 5G cloud networks encourage communication between devices, and increased differentiation will help administrators identify and isolate a compromised device before hackers can gain access to the rest of the network. In that regard, the report noted that service providers cannot guarantee a fully secure cloud, and that operators do have some responsibility to make sure that employees using the cloud are following security best practices.

Many of the companies that would be expected to bid on a cloud government contract (including Microsoft and Verizon) are already part of CISA’s public-private Joint Cybersecurity Defense Collaborative, which helps guide the federal government’s cybersecurity objectives. The next three Enduring Security Framework reports will address network resources, data protection practices, and infrastructure integrity.

Source: NextGov

Filed Under: Industry News Tagged With: 5G technology, CISA, cloud security, cybersecurity, Cybersecurity and Infrastructure Agency, government reports, MNOs, mobile network operators, national security, National Security Agency, NSA

Related News & Articles

Switzerland Unveils New National Digital ID Scheme

Apple Exploring Face ID for Apple Watch 4

ENACOMM and WRG Bring Voice Banking to Credit Unions

Primary Sidebar

Learn About Mobile ID and Aviation

Tweets

Sponsored Links

facetec logo

FaceTec’s patented, industry-leading 3D Face Authentication software anchors digital identity, creating a chain of trust from user onboarding to ongoing authentication on all modern smart devices and webcams. FaceTec’s 3D FaceMaps™ make trusted, remote identity verification finally possible. As the only technology backed by a persistent spoof bounty program and NIST/iBeta Certified Liveness Detection, FaceTec is the global standard for Liveness and 3D Face Matching with millions of users on six continents in financial services, border security, transportation, blockchain, e-voting, social networks, online dating and more. www.facetec.com

FACEPHI is a global leader in Facial Recognition technology and in Mobile Biometrics technologies. With a strong concentration in the financial sector, FacePhi’s product is rapidly becoming a service used by banks all over the world. Its implementation doesn’t just save money, it is also a way to attract clients and build loyalty, while increasing the security of transactions for both the customer and the business. To learn more about FacePhi, visit https://www.facephi.com/en/

Recent Posts

  • IDEMIA Brings Mobile ID to Missouri
  • Selfie-based Age Verification Emerges as Important New Digital Identity Market
  • Aiming to Extend Digital ID Beyond Air Travel, Onfido Acquires Airside
  • BIPA Plaintiff Drops Case After Reviewing FaceTec’s Privacy-focused Architecture
  • Apple Mobile Driver’s License Arrives in Georgia

Footer

  • About Us
  • Company Directory
  • Advertise With Us
  • Contact Us
  • Privacy Policy
  • Terms of Use
  • Archives
  • CCPA: Do not sell my personal info.

Follow Us

Copyright © 2023 MobileIDWorld