How change to all-IP world impact attack scenarios and how CERT teams can be prepared?

Speaker: Anu Puhakainen and Michael Skogberg

The ongoing network transformation impacts the business environment of all the actors in communications. While many more millions of people get access to services improving their daily lives, the whole networked community is exposed to the security threats that a global communication system entails.

The session starts with a discussion about how the change to all-IP networking and convergence of fixed and mobile communications creates new possibilities for attackers. Ensuring security while maintaining appropriate privacy has been challenging in communication networks in the past. In the coming years, it will be even more of a challenge due to changes that takes place. The session continues with how network convergence, the opening up of networks and security de-perimeterization lead to an emergence of serious threats that were previously inapplicable. Both networks and end-users will be targeted with traffic that serves other purposes than what the communications solutions were designed for. CERT teams need skills, tools and collaboration to understand and adapt to a continuously changing security environment while equipment vendors must provide proper security in their products, solutions and services.

The session will cover how evolving networks place strict demands on distributed protection mechanisms and the relevance of possible countermeasures like event censoring, traffic separation, traffic protection and node protection in increasingly untrusted telecommunication network environments.