NSA and CISA share guidance on securing 5G cloud infrastructure

guest · Oct 28, 2021

NSA and CISA share guidance on securing 5G cloud infrastructure
October 28, 2021
https://www.bleepingcomputer.com/ne...guidance-on-securing-5g-cloud-infrastructure/

CISA and the NSA shared guidance on securing cloud-native 5G networks from attacks seeking to compromise information or deny access by taking down cloud infrastructure.

The two federal agencies issued these recommendations for service providers and system integrators that build and configure 5G cloud infrastructure, including cloud service providers, core network equipment vendors, and mobile network operators.
Click to expand...

The guidance, released as a four-part series, builds on a white paper released in May 2021 by the Enduring Security Framework (ESF) following the 5G study group, which explored potential threat vectors and vulnerabilities inherent to 5G networks.
It's also the direct result of engaging with experts across government and industry to identify risks impacting 5G security.
Click to expand...

Blocking lateral movement in 5G cloud networks
"5G networks, which are cloud-native, will be a lucrative target for cyber threat actors who wish to deny or degrade network resources or otherwise compromise information," the joint advisory says.

"To counter this threat, it is imperative that 5G cloud infrastructures be built and configured securely, with capabilities in place to detect and respond to threats, providing a hardened environment for deploying secure network functions. "
The first part of the guidance, published today, focuses on mitigating lateral movement attempts by threat actors who have breached a 5G cloud system.
Click to expand...

Joint advisory: "Security Guidance for 5G Cloud Infrastructures - Part I: Prevent and Detect Lateral Movement"
(PDF): https://media.defense.gov/2021/Oct/28/2002881720/-1/-1/0/SECURITY_GUIDANCE_FOR_5G_CLOUD_INFRASTRUCTURES_PART_I_20211028.PDF

guest · Oct 28, 2021

NSA-CISA Series on Securing 5G Cloud Infrastructures
October 5, 2021
https://us-cert.cisa.gov/ncas/curre...cisa-series-securing-5g-cloud-infrastructures

The National Security Agency (NSA) and CISA have published the first of a four-part series, Security Guidance for 5G Cloud Infrastructures. Security Guidance for 5G Cloud Infrastructures – Part I: Prevent and Detect Lateral Movement provides recommendations for mitigating lateral movement attempts by threat actors who have gained initial access to cloud infrastructures.

This guidance has been created by the Critical Infrastructure Partnership Advisory Council (CIPAC) Cross Sector Enduring Security Framework Working Group—a public-private working group that provides cybersecurity guidance addressing high-priority cyber threats to the nation’s critical infrastructure.
Click to expand...

CISA encourages 5G providers, integrators, and network operators to review the guidance and consider the recommendations.
Click to expand...

guest · Nov 19, 2021

Part 2 / 4
NSA and CISA Release Guidance on Securing 5G Cloud Infrastructures
November 19, 2021
https://us-cert.cisa.gov/ncas/curre...se-guidance-securing-5g-cloud-infrastructures

CISA has announced the joint National Security Agency (NSA) and CISA publication of the second of a four-part series, Security Guidance for 5G Cloud Infrastructures. Part II: Securely Isolate Network Resources examines threats to 5G container-centric or hybrid container/virtual network, also known as Pods. The guidance provides several aspects of pod security including limiting permissions on deployed containers, avoiding resource contention and denial-of-service attacks, and implementing real-time threat detection.

This series is being published under the Enduring Security Framework (ESF), a public-private cross-sector working group led by NSA and CISA.
Click to expand...

CISA encourages 5G providers, integrators, and network operators to review the guidance and consider the recommendations.
Click to expand...

Security Guidance for 5G Cloud Infrastructures. Part II: Securely Isolate Network Resources
(PDF): https://www.cisa.gov/sites/default/files/publications/Security_Guidance_For_5G_Cloud_Infrastructures_Part_II_Updated_508_Compliant.pdf

guest · Dec 6, 2021

NSA and CISA Release Part III of Guidance on Securing 5G Cloud Infrastructures
December 2, 2021

CISA has announced the joint National Security Agency (NSA) and CISA publication of the third of a four-part series, Security Guidance for 5G Cloud Infrastructures. Part III: Data Protection examines security during all phases of the data lifecycle—in transit, in use, and at rest. The guidance focuses on protecting the confidentiality, integrity, and availability of data within a 5G cloud infrastructure to protect sensitive information from unauthorized access. This series is being published under the Enduring Security Framework (ESF), a public-private cross-sector working group led by NSA and CISA.
Click to expand...

CISA has also released a set of four 5G educational videos to enhance the awareness and importance of the safe and secure development and deployment of 5G infrastructure.
Click to expand...

CISA encourages 5G providers, integrators, and network operators to review the guidance and consider the recommendations. See CISA’s 5G Security and Resilience webpage for more information.
Click to expand...

Security Guidance for 5G Cloud Infrastructures. Part III: Data Protection
(PDF): https://www.cisa.gov/sites/default/files/publications/Security_Guidance_For_5G_Cloud_Infrastructures_Part_III_508_Compliant.pdf

ronjor · Dec 16, 2021

NSA and CISA Release Final Part IV of Guidance on Securing 5G Cloud Infrastructures

Original release date: December 16, 2021
CISA has announced the joint National Security Agency (NSA) and CISA publication of the final of a four-part series, Security Guidance for 5G Cloud Infrastructures.
Click to expand...

Part IV: Ensure Integrity of Cloud Infrastructure focuses on platform integrity, microservices infrastructure integrity, launch time integrity, and build time security to ensure that 5G cloud resources are not modified without authorization. This series was published under the Enduring Security Framework (ESF), a public-private cross-sector working group led by NSA and CISA.
Click to expand...

CISA encourages 5G providers, integrators, and network operators to review the guidance and consider the recommendations. See CISA’s 5G Security and Resilience webpage for more information.
Click to expand...

Log in or Sign up

NSA and CISA share guidance on securing 5G cloud infrastructure

guest Guest

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

Log in or Sign up

NSA and CISA share guidance on securing 5G cloud infrastructure

guest Guest

guest Guest

guest Guest

guest Guest

ronjor Global Moderator

Useful Searches