Telecom
Protecting Assets in a Remote-first (and potentially Hostile) World
By: Chester Wizniewski, Field CTO Applied Research at Sophos
I live in a city center and the lunch hour certainly isn’t like it once was. While some people have returned to working in an office, it seems that the majority have not. Looking back, the pandemic will have been a turning point for many things around the world, and the rhythms of office-centered worklife will be something that will never return to the old ways.
With this increased flexibility employees are not just working from home behind consumer-grade Wi-Fi routers; they are also spending part of the day at the park or coffee shop, or perhaps even having a “working holiday.” Those in charge of protecting enterprise assets have to assume these endpoints are always in hostile territory.
Even before the pandemic, organizations working toward improving their security maturity were often trying to “push left.” What is pushing left? At its most basic level it means moving things closer to the start. It originates from software development where the stages of the development process are conceptualized from left to right, left being the beginning. In applied security we also use the term “pushing left,” but rather than referring to the software development process we are referring to the attack chain, which moves from reconnaissance on the left through action (exfiltration or other attacker goal) on the right.
For many years, the most comprehensive security strategies have involved defense in depth. The idea is that not all technologies are suitable for detecting a given threat type, so it is best to deploy them in layers. These layers often directly correspond to how far “left” something is in the attack chain. If you can detect something at the network border through your firewall, email, or web filters, you have contained the threat before it has any negative impact on operations.
Ideally you want to detect and block an attacker as far left as possible, i.e., as early as possible. Pushing detections left also alerts security analysts that an intrusion may be underway, initiating more focused threat hunting to anticipate gaps in defenses your attacker may be attempting to exploit.
For employees at the office, you can centralize control of these defenses and provide optimum protection. The question is, are you able to provide the same protection for remote workers regardless of their location? Can you monitor and respond to threats being detected on those assets when they are out of the office? As many have observed, this did not work as well as we would have liked when we all went into lockdown, many of us without a plan.
While there are still many benefits to monitoring the network when you have control of it, including reduced endpoint overhead and the ability to keep threats at a distance from sensitive assets, we need to ensure we can take as much of this protection as possible with us when we are out and about.
We must ensure not only that protection is optimized, but also that we don’t lose our ability to monitor, detect, and respond to attacks targeting these remote assets. Most organizations have moved to utilizing EDR/XDR solutions (or plan to in the very near future) , which is a great start, but not all solutions are comprehensive.
In the remote-work era, insufficiently protected remote users can encounter plenty of issues – malicious URLs and downloads, and network attacks, to name only the most mundane – that in the Before Times would have been handled by machines guarding the corporate “fort.” The biggest missing components when users are “outside the fort” are HTTPS filtering and web content inspection of the sort that is typically implemented within next-generation firewalls. When you add these technologies to pre-execution protection, behavioral detection, machine learning models, client firewalls, DLP, application control, and XDR, you are starting to look at a comprehensive stack of defenses for attackers to overcome – even if the endpoints themselves are now free-range.
For initiatives like zero trust network access (ZTNA) to be effective, we must not only wrap the applications we interact with, but we must also wrap the endpoints that connect to them. Simple checks like whether the OS is up-to-date and whether it has security software installed may be a good start, but not all protection is created equal.
With most devices being connected to the internet whenever they’re in use, we can leverage the power of the cloud to help provide ubiquitous protection and monitoring. Modern security solutions must assume the endpoint device or phone is in a hostile environment at all times. The old idea of inside and outside is not only outdated, it’s downright dangerous.
Repairs and revenue losses from damaged cables are estimated to have cost Nigeria’s telecom industry almost N27bn ($23m) in 2023, according to documents obtained by Bloomberg.
MTN Nigeria, the biggest wireless operator in Africa’s most-populous nation, and Airtel Africa Plc bore the brunt of the costs, the documents show.
MTN suffered more than 6,000 cuts on its fiber cable last year, the documents show.
On Feb. 28, a cut in its network in three different locations by a road construction firm, an oil serving company, and someone burning rubbish in a manhole meant customers faced more than five hours of data and voice outages.
The operator relocated 2,500 kilometers (1,553 miles) of vulnerable fiber cables between 2022 and 2023, at a cost of more than N11bn —enough to build 870 kilometers of new fiber lines in areas without coverage.
Broadband fibre optic cables form the backbone of modern communication infrastructure, enabling the high-speed data transmission that underpins a wide range of personal, business, and societal activities.
On several occasions, the Nigerian Communications Commission (NCC), the industry regulator, has acknowledged this challenge and expressed willingness to work on measures to address it.
These measures include stricter regulations to deter vandalism and improved collaboration between telcos and government agencies responsible for construction activities.
According to the NCC, the telecom sector will make up more than a fifth of the country’s gross domestic product by the end of 2027, up from 13.5 per cent in the third quarter of last year.
Isa Pantami, former minister of Communications and Digital Economy, has voiced his discontent over the relaunch of the National Centre for Artificial Intelligence and Robotics (NCAIR) by Bosun Tijani, his successor.
Isa Pantami, former minister of Communications and Digital Economy,
Tijani announced the revitalization of NCAIR, highlighting enhancements in its capacity and partnerships with global tech firm Cisco.
However, Pantami took to social media to assert that NCAIR was already established during his tenure in November 2020, dubbing it “the first of its kind in Africa” and emphasizing its effectiveness in training numerous Nigerians.
Tijani responded by detailing the new initiatives accompanying the relaunch, including increased computing infrastructure, dedicated research labs, and remote connectivity for AI hubs across the country. He also unveiled outcomes from the Ministry’s National AI Workshop, such as the country’s first Multilingual Large Language Model and partnerships aimed at accelerating AI development projects of national significance.
The exchange between Pantami and Tijani underscores ongoing efforts to advance AI research and application in Nigeria while navigating questions of continuity and leadership transition within the Ministry.
This year’s Africa’s Beacon of ICT Merit and Leadership lecture will focus on the role of artificial intelligence in a digital economy with the theme: “Artificial Intelligence (AI): The Good, The Complex and The Anticipated”.
The lecture which will herald Africa’s Beacon of ICT Merit and Leadership Awards hold on May 25, 2024 at Four Points by Sheraton.
The sixteenth edition of the award ceremony according Ken Nwogbo, editor-in-chief of Nigeria CommunicationsWeek the organizers of the event, “is a special edition to recognize and celebrate organizations and individuals in the ICT industry that have been distinguished in delivery innovative services in the sector.
“Most of these organizations and individuals have consistently being voted by our readers as leaders in their areas of operations and we have decided to reward them in this especial edition”.
He added that, AI is considered to have the potential to instigate a fourth industrial revolution,1 and is dramatically changing people’s patterns of interaction and economic activities.
“The traditional factors of production and physical capital and labour may no longer promote substantial economic growth. It is generally believed that AI will be one of the most important factors determining future economic growth.
“However, unlike traditional machines, which replaced the use of human and animal labor for simple manual work and heavy or dangerous activities, AI-related inputs may change the type of human work in a comprehensive way.
“In contrast to previous industrial revolutions, AI does not simply involve the invention of a new machine or technology. Instead, AI has similarities to the accumulation of human capital, as it can learn and accumulate knowledge by itself,” he said.
The Africa’s Beacon of ICT Merit and Leadership Distinguished Lecture is designed to explore efforts to put Nigeria on the global Information and Communications Technologies map.
The lecture series however is reserved for distinguished achievers in the ICT sector.
Past lecturers included Dr. Ernest Ndukwe, then executive vice chairman, Nigeria Communications Commission (NCC); Engr. Yomi Bolarinwa, former Director-General of National Broadcasting Commission (NBC); Dr. Jean Luc Fort, CEO at OR System France and a specialist in Counterparty Risk; and Professor Chris Nwagboso, Chairman, Knowledge Factory International, United Kingdom.
Others are: Uche Orji, managing director/chief executive officer, Nigeria Sovereign Investment Authority (NSIA); Biodu Omoniyi, Managing Director/CEO, VDT Communications; Ayotunde Coker, Managing Director, Rack Centre Limited; Peter Adedayo Arogundade, managing director and chief executive officer, Sidmach Technologies Nigeria Limited; Dr. Adewale Obadare, chief visionary officer, Digital Encode and John Obaro, CEO and founder of Systemspecs; Prof. Isa Pantanmi, minister of Communications and Digital Economy; among others.
Former SEC Leadership Failed to Regulate, Develop Capital Market- ASCSN
Students Loans’ Beneficiaries to Start Repayment 2 Years after Graduation- NELFUND:
Kenya to Extradite Anjarwalla, Binance Executive Linked to Tax Evasion to Nigeria
GPA Raises Alarm, Says Malaria Vaccine Can Cause Meningitis
Abdullahi, NITDA Boss Harps on Partnership to Drive Advance Digital Transformation Agenda
See Full List of Fake Loan Apps Blacklisted By CBN
FIRS Files Tax Evasion Charges against Binance
IFC Invests in New 4DX Ventures Fund to Support Tech Startups in Africa
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
NGX RegCo, FRCN Unveil Roadmap for SFRS Adoption
Telecom2 days agoABoICT Lecture 2024 to Focus on Artificial Intelligence (AI) In A Digital Economy
Telecom2 days agoTelcos Record N27Bn Loss from Damaged Fibre Cables
Telecom2 days agoNCAIR Relaunch: Pantami, Tijani Fight for Credit
News2 days agoFG to Secure Fresh $2.25Bn World Bank Loan
News2 days agoWema Bank Launches 5th Edition of Youth-Focused Hackathon, “Hackaholics”
E-Business2 days agoForex Volatility will Not End Overnight- CBN Gov
E-Financial2 days agoDimon, JP Morgan CEO Describes Bitcoin as Fraud, Ponzi Scheme
E-Financial2 days agoAccess Holdings to Use Tech in Raising N365bn Capital