The Best Router Security Configurations for Your Business WiFi Network

WiFi Network

Wi-Fi and the Internet have become an indispensable part of our daily lives. Because of the importance and convenience of a business Wi-Fi network, it is now a must-have service for most businesses. Unfortunately, numerous small-to-medium-sized businesses lack the resources and cyber skills required to appropriately secure their networks. This can be a major issue because an unsecured network exposes the company to attacks from hackers looking to steal valuable company information or customer data.

How Can Businesses and IT Leaders Strengthen Their Wi-Fi Security?

A data breach can cripple your business. It not only undermines consumer trust, but data breaches cost an average of $4.24 million. Fortunately, improving your Wi-Fi security is not difficult. To safeguard your company's wireless Internet connection, follow the steps outlined below.


Use Up-To-Date Wi-Fi Encryption

You should upgrade your hardware if it can only support WEP or WPA encryption. The Wi-Fi Alliance strongly encourages the widespread use of WPA2. Cutting-edge encryption has been demonstrated to be protected against even the most persistent attackers when correctly implemented. If you run an enterprise environment, you should take advantage of the extra security provided by specific digital certificates.


Encrypt Wi-Fi Router Administration Pages

Taking your Wi-Fi security a step further needs the use of a Wi-Fi digital certificate to secure your admin login pages. Self-signed certificates that come pre-installed on a few routers are untrusted, easy to copy, and prone to Man-In-The-Middle (MITM) attacks. TLS certificates from reputable certificate authorities can ensure that all of your Wi-Fi connectivity is safe and confidential. If your router's quick start guide does not contain digital certificates, you can obtain information on the manufacturer's support page.


Consider Restricting MAC addresses

Smaller network managers can lock down MAC addresses for more control. Wireless routers and access points use MAC (Media Access Control) address filtering to block attacks. Every WiFi-enabled device has a unique MAC or physical address and a list of connected devices. You can manually enter addresses to define network access, but hackers can fake MAC addresses.


Use Always-On SSL

You must utilize HTTPS across your website and apply it to Wi-Fi. Accessing an account on an encrypted page and subsequently interacting with the site through unencrypted pages exposes the user to session-side jacking.


Create a Guest AP with Tighter Security

Not all businesses must enable guests or customers to connect to their networks, but some companies do offer guests access by providing them with guest login credentials. If your company falls into this category, set up a dedicated guest AP that is isolated from the rest of the company network.
You can set up a second AP on your router and utilize a firewall to limit access from that AP to certain services that you want your visitors to be able to access.


Closing Lines

Nowadays, having an internet connection is critical for organizations, as is keeping it secure from hackers. Moreover, when conducting business, it is crucial to keep critical information and customer data secure.
Otherwise, you risk compromising your company's image. So, if you want to maintain your Wi-Fi network security and keep your business working effectively, you must adhere to a few fundamental principles.
Finally, you are on the path to make your Wi-Fi network safer and more robust by following all of these techniques at once or step by step.

Spotlight

AirHop Communications

AirHop is a leader in Self Organizing Network (SON) solutions for dynamic resource optimization and QoS/QoE management of heterogeneous wireless networks.

OTHER ARTICLES
Enterprise Mobility, Mobile Infrastructure

SA and NSA: The Difference Between 5G Architectures

Article | June 16, 2023

Choosing the right 5G architecture is crucial for enhancing operations while keeping scalability and budget in mind. Learn whether SA or NSA is more suitable for your business needs with this article. 1. Introduction to 5G Network Architectures 2. What is 5G SA? 2.1 Characteristics of SA Architecture 2.2 Benefits of SA Architecture 3. What is 5G NSA? 3.1 Characteristics of NSA Architecture 3.2 Benefits of NSA Architecture 4. Factors to Consider When Choosing Between SA and NSA 4.1 Cost Implications of Each Architecture 4.2 Future Implications of Each Architecture 5. Conclusion 1. Introduction to 5G Network Architectures Widespread implementation of 5G is transforming how businesses across verticals operate, providing enhanced speed, low latency, and massive connectivity. The advancements in 5G system architecture enable new use cases, from autonomous vehicles to smart cities. There are currently two types of 5G network architecture, namely 5G standalone (5G SA) and 5G non-standalone (5G NSA). These two architectures differ in how they connect to the existing 4G infrastructure, the type of equipment required, and the level of network independence. Therefore, understanding the difference between SA and NSA is crucial for companies and organizations implementing 5G architecture. 2. What is 5G SA? 5G SA architecture is an entirely new technology that uses 5G core network architecture, independent of the current 4G LTE network. It has various use cases, such as combining 5G with AI and edge use cases. 2.1 Characteristics of SA Architecture Independent Network: All components of the architecture, including the 5G core architecture, radio access network, and user equipment, are not reliant on any 4G technology. High Performance: 5G SA architecture is optimized for high performance and low latency, enabling fast data transfer rates and near-instantaneous response times. Distributed Architecture: This allows efficient resource allocation and dynamic management of network resources. End-to-End Encryption: It provides end-to-end encryption, which ensures that data is secure and protected from unauthorized access. Higher Cost: 5G SA architecture is more expensive to implement than NSA architecture due to the need for a fully independent 5G network infrastructure. 2.2 Benefits of SA Architecture Low Latency: Applications of 5G that require real-time processing are only possible with SA architecture. Customization: As SA does not depend on existing network architecture, it can be tailored to company requirements. It also enables network slicing for 5G enterprise private network use cases. Security: End-to-end encryptions ensure a more secure network, and 5G network slicing keeps various access levels separate. Scalability: 5G architecture is designed to be highly scalable and handle large volumes of data and devices. Future-proofing: SA architecture will be able to support upcoming 5G features and capabilities by design. 3. What is 5G NSA? 5G NSA provides a transition into 'true' 5G architecture by incorporating 4G network infrastructure for deployment. 3.1 Characteristics of NSA Architecture Non-Independent Network: 5G NSA architecture is designed to leverage the existing 4G infrastructure to deliver 5G services. Transition to SA: NSA offers lower latencies and faster speeds than 4G LTE without deploying 5G architecture. Integrated Deployment: 5G NSA can be deployed quickly since it integrates existing infrastructure. Limited Scalability: As it relies on the existing 4G infrastructure, NSA is limited in scaling. Low Scalability: There is a lower limit on how many devices can join the network and the data volume that can be processed on NSA. 3.2 Benefits of NSA Architecture Faster Deployment: 5G NSA architecture can be deployed more rapidly than SA architecture. Easier Integration: 4G integration with existing networks is easier since it uses architecture. Cost-effective: 5G NSA architecture is generally less expensive to implement as it doesn't require a complete overhaul of the existing infrastructure to a 5G core architecture. Improvement Over 4G: While not providing the speed and low latency of 'true' 5G, NSA offers significant improvements over 4G networks. 4. Factors to Consider When Choosing Between SA and NSA 4.1 Cost Implications of Each Architecture SA architecture requires a complete overhaul of the existing infrastructure, which can result in higher infrastructure and deployment costs. However, SA architecture can be more cost-effective in the long run due to its future-proof design and ability to provide greater scalability and customization. On the other hand, NSA architecture leverages the existing 4G infrastructure, resulting in lower infrastructure and deployment costs. However, upgrading and maintaining an existing 4G network to support 5G technology can be complex and may result in higher operational costs in the long run. 4.2 Future Implications of Each Architecture SA architecture is designed to be future-proof and scalable, supporting upcoming 5G features and capabilities. This can give organizations greater flexibility and agility to respond to changing business needs and emerging technologies. On the other hand, NSA architecture may be less future-proof and require additional investments in infrastructure and resources to support new 5G features and capabilities. 5. Conclusion While NSA architecture may offer lower upfront costs and a faster deployment timeline, SA architecture may be more future-proof and scalable in the long run. Choosing the appropriate 5G architecture is a critical determinant for organizations aiming to utilize 5G technology in building a connected industry of the future. Organizations must evaluate their requirements and consider each architecture's short and long-term costs and operational implications before making a decision.

Read More
Enterprise Mobility

How Can Machine Learning Streamline Networking?

Article | June 15, 2023

Applications of AI/ML Modern businesses are adopting Artificial Intelligence (AI) that encompasses disciplines like machine learning (ML), natural language processing (NLP), evolutionary computation, etc., to increase their productivity and management capabilities. Companies like Qualcomm are using AI and machine learning to improve their customer experience. “Across many industries, we are currently experiencing the creation of intelligent machines that is using AI to simulate smart behavior.” -Dr. Vinesh Sukumar, Senior Director- Head of AI/ML Product Management at Qualcomm, ( in an interview with Media7) The application of machine learning in networking is swiftly taking shape. However, as the problems in modern computer networks are getting tedious to handle, AI tools are being introduced to hard-carry their smooth functioning. Let’s take a look at how network complexity impacts businesses: Difference in Network Parameters Different client devices like laptops, smartphones, CCTV cameras, etc., are connected to a single network. However, their requirements and parameters are different. Therefore, the IT team of the business needs to meet them without compromising the functionality and security of the network. Users Prefer Wireless Networks Wireless networks are more complex than wired ones. They perform dynamically depending on the number of users, applications, and other variables. Impact of Cloud Computing Most applications are now cloud-based, and such a network has multiple data entry points and requires more support. User Experience Deciphering root cause analysis, finding correlation and solutions becomes tedious without an AI/ML model. Complex patterns remain unanalyzed, and this creates a vacuum between the customer and the business. What Does ML Bring to the Table? Machine learning applications in networking correlate to solving four types of network problems: clustering, extraction, regression, and classification. For classification and regression, ML clusters similar data and creates a gap between data groups. It then successfully maps a new set of data to a pre-set continuously valued output. As for extraction, it easily establishes a statistical relationship between the data it analyzes. Machine learning applications in networking encompass the following: Automation and Cognitive Computing ML enables automation in data processing by eliminating the human error factor and constantly improving with time. It analyzes data, improves the productivity, security, and health of the network. Cognitive computing allows processing diverse data sets, detecting and finding root causes and common traits within the system. Network Monitoring & Security Network monitoring is used to solve problems in a large dataset by deciphering the hidden pattern in the data. It then predicts the outcome for clustered data, malware attacks, or impending network failure. It recognizes impending threats in time and sends out warnings. ML uses anomaly-based intrusion, misuse-based intrusion, or hybrid intrusion to prevent misuse, modification, unauthorized access, or malfunction. Traffic Prediction, Classification, and Routing Network traffic prediction is important to handle any mishaps proactively. Network analysis in machine learning is done by using Time Series Forecasting (TSF). By using a regression model solution, TSF finds a correlation between the traffic volume in the future and the traffic previously observed. Traffic classification ensures Quality of Service (QoS), planning ahead for capacity, security, performance analysis, etc. It helps with proper resource utilization by pinpointing unnecessary traffic in a critical application. Factors like cost-effectiveness, link utilization, operational capabilities, and policies are also considered by the ML model. Congestion Control ML models control the number of packets that enter a network to ensure that the network is stable, fairly utilize resources, and follow queue management employed for congestion control. Efficiently Managing Resources ML efficiently manages network resources like the CPU, frequency, switches, memory, routers, etc., by using analytical decision-making. ML Learning Curve ML models learn in the following ways: Pitfalls Like any other technology, machine learning application in networking comes with pitfalls and limitations. Here are a few: Data Quality The efficiency of an ML model is based on the quality, quantity, and diversity of data it processes so it can deduce patterns or identify root causes. Most ML models use simplistic synthetic data for training, validation, and performance. The same cannot be said about practical settings because the data comes from different applications and services and is more complex. Feasibility There are scalability and feasibility issues because each network and application is different. Moreover, there are no set standards for uniformity for implementation which makes it hard to set benchmarks or best practices. Control over autonomic networks is distributed and remains limited based on the vendor’s specific devices. Predictive Analysis and Its Cost Network analysis and machine learning prediction require additional accurate and effective monitoring investments. Moreover, fault management may have some potholes as there may be a scarcity of normal fault data. High FPR (False Positive Rates) Anomaly detection by ML in networking has not created enough buzz in the industry because it generates high FPRs during operations. Also, no detailed anomaly report is generated, so no anomaly history log can be maintained. Striking a Balance ML requires time to learn and mitigate issues. It is difficult to identify, in advance, how complex the ML’s approach will be. Striking a balance between the performance and computational cost is difficult. Deciphering comprehensive evaluation metrics is also a tedious task. No Theoretical Model There is no theoretical model, in turn, a unified theory, for ML in networking, so each network may have to be learned separately. The current machine learning applications in networking are made keeping in mind certain applications. Over time, more research to tailor ML for certain networks needs to be done. Cross-domain experts who understand both ML and networking are also rare. Solutions Software Defined Networking (SDN) CISCO helped PwC Italy set up a secure network at their new twenty-eight-floor tower with the help of their SD-Access product. PwC wanted a secure, robust network with increased Wi-Fi and wired connectivity for their 3000 employees by streamlining network operations. “We needed a robust and highly reliable wireless network infrastructure that’s as advanced as the tower itself.” -Simone Demaria,Network Architect and Infrastructure Manager at PwC Italy By applying Software Defined Network (SDN), IT personnel can remotely govern network policies in real-time through open interfaces, so traffic engineering is easily possible. SDN also contributes to network virtualization. SDN supports the upcoming 5G ecosystem. When combined with NFV and VNF, SDN can revolutionize networking. Going Beyond Traffic Volume & Prediction To tackle the limitations that TSF-based traffic prediction models have, leveraging features beyond traffic prediction and concentrating on traffic interpolation and sampling could be viable. Research is ongoing on this possibility. Summing It Up As the influx of data keeps on increasing, the complexity of networks will increase in tandem. For successfully implementing ML for streamlining networking, the ML approaches we are aware of today need to be upgraded to accommodate multi-layer networks and multi-tenancy so autonomic networking can be a reality. FAQs How Can ML Help in Making Networking Smarter? ML can streamline the network by automation, threat detection, and improving its performance. How Complex Is Integrating ML into Networking? The complexity depends on the type of network you are integrating it into. What to Keep in Mind Before Using Ml in Networking? Consider investment costs, data availability, feasibility, and scalability. { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{ "@type": "Question", "name": "How Can ML Help in Making Networking Smarter?", "acceptedAnswer": { "@type": "Answer", "text": "ML can streamline the network by automation, threat detection, and improving its performance." } },{ "@type": "Question", "name": "How Complex Is Integrating ML into Networking?", "acceptedAnswer": { "@type": "Answer", "text": "The complexity depends on the type of network you are integrating it into." } },{ "@type": "Question", "name": "What to Keep in Mind Before Using Ml in Networking?", "acceptedAnswer": { "@type": "Answer", "text": "Consider investment costs, data availability, feasibility, and scalability." } }] }

Read More
Network Infrastructure, Network Management

5G Enterprise Private Network: 9 Ways to Scale Your Business

Article | July 27, 2023

Something revolutionary that solves problems becomes a product or service with many trade secrets you cannot afford to let loose in the market. All small, medium, and large businesses worry about how vulnerable they are to threats as far as data sharing within the organization is concerned. This is where a private network comes in. Every business wants to take a technological leap for scalability. Two of the factors that private networks address are independence from commercial carriers for the network and maintaining the privacy of trade secrets. This helps achieve long-term goals to scale your business. Powering your enterprise private network with the futuristic speeds of 5G can help your business achieve two goals at once. Take a look at why 5G has now started to matter even more. Why 5G? By 2026, the 5G market will reach $667.90 billion, with a CAGR of 122.3% from 2021 to 2026. It is estimated to go beyond $1.87 trillion by 2030. This massive technological transition will forever change how we communicate, process information, and connect with the cloud. A boost in turnkey research and development is one of the vital benefits of 5G that will help your business be one step ahead in the market. What Makes the 5G Enterprise Private Network Ideal for Small and Medium-Sized Businesses? A private enterprise network is VPN, LAN, WAN, or cloud-based. High-speed internet and low-latency data sharing or transfer are achieved using fiber optics in a 5G EPN. Expect superior service security, network slicing, enhanced service quality, and no risk of network congestion. Design your 5G EPN as per the software integrations required for your small and medium-sized business. This will allow seamless integration for present and future needs. 5G is about 100 times faster than 4G, leading to incredible speeds and unlocking many never-seen-before possibilities accelerating the speed of research for your enterprise. The network efficiency and the traffic capacity it can handle are 100x. Connecting and sharing data in almost real-time is made possible with 5G. This means, a private 5G network can reduce the infrastructure needs of relatively more demanding managed wired networks for small and medium-sized businesses supporting 5G ecosystems. But it will keep up with the most advanced wireless technologies of the future and stop supporting older ones. In addition, 5G supports lower power consumption than 4G during data transmission. This means enterprises get better battery life on devices running 5G, including 5G IoT devices. How Secure is a 5G Enterprise Private Network? The 5G enterprise private networks are integrated or hybrid EPNs (enterprise private networks) and independent EPNs. It depends on whether your business wants to lease 5G spectrum from the government or a mobile network operator (MNO) and whether you will use a hybrid or independent EPN. • Integrated 5G EPN: A small business can lease a private 5G line from an MNO. A public 5G network backs a virtual private network (VPN) for medium-to-small businesses. On the other hand, MEC and UPF from a public 5G network are used to set up a local network for large businesses. • Independent 5G EPN: This is the most secure type of 5G EPN, the independent 5G EPN. It is independently built for your enterprise, owned, operated, and managed by you. You will be handling the RAN, core, edge computing nodes, and the wireless spectrum reserved for your use. These are mostly the goals of a large business that sends and stores data that needs to be very secure. An independent 5G EPN is the best solution for large enterprises looking for the most secure private network. Also, it applies to businesses dealing with massive amounts of data. Why Use the Cloud for Storage and Retrieval of Data in 5G EPN? Access computing resources, data storage, development tools, and applications across the internet with the help of the cloud. The combined features of 5G and a private enterprise network create a healthy environment to implement cloud infrastructure. When thinking about using the cloud to store and get data in a 5G EPN, keep in mind the good things about it. Interconnected, shared resources 5G speed Improved reliability Increased data accessibility Better privacy and security Efficient connectivity Now that we have learned networking fundamentals for a better 5G EPN are resolved with the help of the cloud, let us discover how it can help your business scale. How Can Your Small, Medium, or Large Business Scale up With a 5G EPN Network Easily? You can use a 5G enterprise private network, or EPN, to get the most important benefits for a small business. Speed to promote an industrial digital transformation IoT readiness Better control over digital assets. Improved security Reliable coverage Network slicing Ultra-low latency Improved bandwidth Improved quality of service (QoS) You will have complete control over configuring and customizing your EPN, managed independently by your in-house 5G networks. Explore the future avenues of 5G private networks in detail. The Future of 5G Private Networks and Wi-Fi with Industrial Use Cases: According to a study by RAN Research, by 2028, private 5G networks will generate about $23.5 billion, with 19% usage in the manufacturing industry and 12% of the network in the healthcare industry. The deployment of the 5G network and upgraded Wi-Fi standards will likely be saturated by 2024. Most of the investments would be towards upgrading the infrastructure and maintaining the network. The goal of fierce competition among telecom network operators will be to gain rapid market share, bringing down the cost of usage. The new service providers will garner competition from telecom giants, while 5G private networks from different enterprises will still be dominant and mainstream in providing security, privacy, and data isolation. Leading Industrial Use Cases Healthcare: A revolution in healthcare benefiting from 5G technology is bound to happen with their transition to a cloud-native architecture. The need for high-speed and reliable connectivity will arise sooner or later, and 5G private networks will perfectly meet the requirement. The driving forces for healthcare to adopt 5G private networks include the shift to demographics, value-based and patient-centric care, and emergency healthcare. In addition, the use of big data analytics, the internet of medical things (IoMT), better wearable medical technology, hospital remote monitoring systems, e-Health and more will need the speed that 5G offers. Manufacturing: The Industrial Internet of Things (IIoT) uses private 5G networks. Depending upon the software-defined implementation of the 5G network, 5G does not just allow remote monitoring of production lines; it also regulates maintenance and device lifecycle while powering industrial automation. 5G is also finding its way into implementing augmented reality for troubleshooting electronics, additive manufacturing and 3D printing, automated guided vehicles, camera-based video analytics and more. Collaborative robotics, supply chain optimization, and maintenance using a digital twin are a few other things that are worth mentioning. Supply Chain: Due to near-shoring, manufacturing and distribution will decentralize. Due to Internet of Things (IoT) devices with sensors, supply chain and shipping logistics companies will be able to reduce delivery times, have better control over warehouse and transportation environments, and offer great asset management services. Final Thoughts Finding the right 5G private network type for your enterprise is easy. It offers enhanced security while connecting to the cloud, IoT and more. This would allow the development of futuristic products and services, touching multiple industries, with healthcare, manufacturing, warehousing, and logistics among the top. Keeping trade secrets and the latest research and development secure and enhancing the capabilities by integrating future technologies will improve with a 5G EPN. With a 5G private network for your enterprise being used on a large scale, the future of networking looks bright. FAQs: What is the difference between a public 5G network and a private 5G network? A single location or several locations of the same institution, business, or organization are the focus of a private 5G network. On the contrary, the public 5G network is nationwide with millions of subscribers without being dedicated to serving a single entity. Because of this, 5G EPN infrastructure solutions will probably be used on college campuses, in factories, hospitals, military bases, transportation hubs, and other places. What is a private 5G network and what are the benefits of a private 5G network? A 5G private network offers low latency, high bandwidth and multiple connections with access control, which are perfect for business applications for small, medium and large enterprises. Furthermore, 5G private networks allow you to tailor them to your business requirements, making them an excellent investment for your business. Again, while diversifying your business as per customer and market demand, it is crucial to have a networking infrastructure that can adapt to your changing needs. Therefore, a private 5G network becomes even more critical. How does EPN help in centralization and business continuity? When implementing business continuity planning and centralization of your organization, a 5G EPN can provide several benefits over a public network. It makes integrations easy, provides high-quality services, improves access control and reliability, and lets your business share resources in the best way for its current and future needs.

Read More

As 5G growth accelerates, CSPs have new opportunities for network differentiation and service growth

Article | July 7, 2021

Despite the COVID-induced interruptions in the first half of 2020, 5G preparations and deployment continued in earnest in the second half of 2020 and now the market – vendors, CSPS, OEMs – are ready to bring 5G to the masses of users. The arrival of Apple’s first 5G devices in 4Q20 marked the tipping point of global consumer readiness, now extending from early-adopters. After the initial phase of network launches that saw coverage built-out in major urban centres, 5G service providers should now focus on expanding coverage to as many areas of high-data demand as possible. At the same time, as CSPs gauge their 5G roll-out strategies, they shouldn’t ignore rural areas with limited-to-no high-speed broadband coverage. In many markets, particularly developing ones, CSPs should carefully assess network-sharing as a way to cost-effectively tap pent-up demand, especially given the accelerating remote working trend.

Read More

Spotlight

AirHop Communications

AirHop is a leader in Self Organizing Network (SON) solutions for dynamic resource optimization and QoS/QoE management of heterogeneous wireless networks.

Related News

Network Security

Ampliphae, HPE Athonet and Arqit deliver Quantum-Safe Private 5G using Symmetric Key Agreement

PR Newswire | January 19, 2024

Arqit Quantum Inc, a leader in quantum-safe encryption, and Ampliphae Ltd (Ampliphae), a leader in network cyber security solutions, have today announced successful completion of a project that will deliver enhanced quantum-safe security for Private 5G networks. The Security Enhanced Virtualised Networking for 5G (SEViN-5G) project, funded by Innovate UK, the UK Government’s innovation agency, leveraged Ampliphae’s network security analytics technology and Arqit’s Symmetric Key Agreement Platform to deliver a quantum-secure Private 5G testbed that can protect against both current and future cyber threats. Athonet, a Hewlett Packard Enterprise acquisition, provided the Radio Access Network (RAN) equipment for the project with a cloud core hosted on AWS. Private enterprise networks based on 5G cellular technology are accelerating digital transformation across industries including manufacturing, healthcare, defence and smart cities. Private 5G gives enterprises access to high-speed, massively scalable, and ultra-reliable wireless connectivity, allowing them to implement innovative IoT and mobile solutions that enhance productivity, drive automation and improve customer engagement. The security of these networks will be paramount as they will support safety-critical infrastructure and carry highly sensitive data. But like any new technology, 5G comes with potential new threats and security risks including the threat from quantum computing. The project finished in December 2023 and customer engagement has already begun. David Williams, Arqit Founder, Chairman and CEO said: “Enterprises want to deploy Private 5G networks with complete confidence that they will be safe from both current and future cyber threats including from quantum computers. Working alongside Ampliphae, we have shown that a quantum-safe Private 5G network is deliverable using Arqit’s unique encryption technology.” Trevor Graham, Ampliphae CEO said: “Private 5G can be hosted partly or completely in the Cloud, giving enterprises the opportunity to rapidly set up their own cellular networks customised to support their operations. With Ampliphae and Arqit they can now be certain that those Private 5G networks are monitored and secure against eavesdropping and disruption.” Nanda Menon, Senior Advisor Hewlett Packard Enterprise said: “In an era where security is paramount, the completion of the SEViN-5G project is a significant milestone. The delivery of a quantum-secure Private 5G testbed, achieved where Athonet have combined the Athonet core with CableFree radios, underscores the commitment to innovation and reinforces the confidence enterprises can have in deploying networks that are both cutting-edge and secure from both present and future threats.” About Arqit Arqit Quantum Inc. (Nasdaq: ARQQ, ARQQW) (Arqit) supplies a unique encryption Platform as a Service which makes the communications links of any networked device, cloud machine or data at rest secure against both current and future forms of attack on encryption – even from a quantum computer. Compliant with NSA standards, Arqit’s Symmetric Key Agreement Platform delivers a lightweight software agent that allows devices to create encryption keys locally in partnership with any number of other devices. The keys are computationally secure and operate over zero trust networks. It can create limitless volumes of keys with any group size and refresh rate and can regulate the secure entrance and exit of a device in a group. The agent is lightweight and will thus run on the smallest of end point devices. The Product sits within a growing portfolio of granted patents. It also works in a standards compliant manner which does not oblige customers to make a disruptive rip and replace of their technology. Recognised for groundbreaking innovation at the Institution of Engineering and Technology awards in 2023, Arqit has also won the Innovation in Cyber Award at the National Cyber Awards and Cyber Security Software Company of the Year Award at the Cyber Security Awards. Arqit is ISO 27001 Standard certified. www.arqit.uk About Ampliphae Ampliphae’s distributed network analytics technology provides insight into how networks are used to support enterprise operations at every level. A graduate of the prestigious LORCA cyber accelerator in London, and the AWS European Defence Accelerator, Ampliphae’s technology is already used by enterprises across multiple verticals to discover, analyse and secure the network traffic that supports their key applications and business processes. Ampliphae’s Encryption Intelligence product operates at enterprise scale to discover devices and applications that use cryptography, analysing their encryption capabilities to detect risks, including assets that are vulnerable to future quantum computer attack. Using Encryption Intelligence, the organisation can gather effective operational intelligence about their encryption landscape, both within and outside the organisation, and build an effective mitigation program to address current and future vulnerabilities.

Read More

Network Security

Cato Networks Introduces World's First SASE-based XDR

PR Newswire | January 25, 2024

Cato Networks, the leader in SASE, announced the expansion of the Cato SASE Cloud platform into threat detection and incident response with Cato XDR, the world's first SASE-based, extended detection and response (XDR) solution. Available immediately, Cato XDR utilizes the functional and operational capabilities of the Cato SASE Cloud to overcome the protracted deployment times, limited data quality, and inadequate investigation and response experience too often associated with legacy XDR solutions. Cato also introduced Cato EPP, the first SASE-managed endpoint protection platform (EPP/EDR). Together, Cato XDR and Cato EPP mark the first expansion beyond the original SASE scope pioneered by Cato in 2016 and defined by industry analysts in 2019. SASE's security capabilities encompassed threat prevention and data protection in a common, easy-to-manage, and easy-to-adopt global platform. With today's announcement, Cato is expanding SASE into threat detection, incident response, and endpoint protection without compromising on the architectural elegance captured by the original SASE definition. "Cato SASE continues to be the antidote to security complexity," says Shlomo Kramer, CEO and co-founder of Cato Networks. "Today, we extend our one-of-a-kind SASE platform beyond threat prevention and into threat detection and response. Only Cato and our simple, automated, and elegant platform can streamline security this way." An early adopter of Cato XDR is Redner's Markets, an employee-owned supermarket chain headquartered in Reading, Pennsylvania, with 75 locations. Redner's Markets' vice president of IT and Infrastructure, Nick Hidalgo, said, "The Cato platform gave us better visibility, saved time on incident response, resolved application issues, and improved network performance ten-fold." (Read more about Redner's Markets and Cato in this blog. "The convergence of XDR and EPP into SASE is not just another product; it's a game-changer for the industry," said Art Nichols, CTO of Windstream Enterprise, a Cato partner. "The innovative integration of these capabilities brings together advanced threat detection, response capabilities, and endpoint security within a unified, cloud-native architecture—revolutionizing the way enterprises protect their networks and data against increasingly sophisticated cyber threats." (Read more about what Cato partners are saying about today's news in this blog.) Platform vs. Product: The Difference Matters Cato XDR takes full advantage of the enormous benefits of the Cato SASE Cloud platform, the first platform built from the ground up to enable enterprises to connect, secure, and manage sites, users, and cloud resources anywhere in the world. Unlike disjointed point solutions and security appliances, Cato capabilities are instantly on, always available at scale, and fully converged, giving IT teams a single, shared context worldwide to understand their networks, prevent threats, and resolve problems. As an autonomous platform, Cato SASE Cloud sustains its evolution, resiliency, optimal performance, and security posture, saving enterprises the operational overhead of maintaining enterprise infrastructure. Enterprises simply subscribe to Cato to meet their business needs. Cato's cloud-native model revolutionized security and networking operations when it was introduced in 2016, a fact validated three years later in 2019 when the Cato approach was formally recognized by the industry as SASE. Breach Times Still Too Long; Limitations of Legacy XDR Cato is again revolutionizing cybersecurity with the first SASE platform to expand into threat detection, empowering security teams to become smarter and remediate incidents faster. The flood of security alerts triggered by network sensors, such as firewalls and IPS, complicates threat identification. In 2023, enterprises required 204 days on average to identify breaches.1 XDR tools help security analysts close this gap by ingesting, correlating, and contextualizing threat intelligence information with the data from native and third-party sensors. However, legacy XDR tools suffer from numerous problems relating to data quality. Sensor deployment extends the time-to-value as IT must not only install the sensors but also develop a baseline of specific organizational activity for accurate assessments. Data quality is also compromised when importing and normalizing third-party sensor data, complicating threat identification and incident response. Security analysts waste time sorting through incident stories to identify the ones most critical for immediate remediation. Once determined, incident remediation is often hampered by missing information, requiring analysts to master and switch between disparate tools. No wonder in 2023, average breach containment required more than two months.1 Cato XDR and Cato EPP Expands the Meaning of SASE Cato XDR addresses legacy XDR's limitations. Instantly activated globally, Cato XDR provides enterprises with immediate insights into threats on their networks. Incident detection is accurate due to Cato's many native sensors – NGFW, advanced threat prevention (IPS, NGAM, and DNS Security), SWG, CASB, DLP, ZTNA, RBI, and now EPP/EDR. Powered by Bitdefender's world-leading malware prevention technology, Cato EPP protects endpoints from attack – in the Cato way. Endpoint threat and user data are stored in the same converged Cato data lake as the rest of the customer's network data, simplifying cross-domain event correlation. The result is incredibly high-quality data that improves the incident identification and remediation process. Cato AI uses the data to accurately identify and rank incidents, empowering analysts to focus critical resources on an organization's most important remediation cases. Cato AI is battle-tested and proven across years of threat hunting and remediation handling by Cato MDR service agents. Remediation times reduce as detected incident stories contain the relevant information for in-depth investigation. Cato's tools sit in the same console as the native engines, enabling security analysts to view everything in one place -- the current security policy and the reviewed story. Finally, incident reporting is simplified with generative AI. Purpose-built for investigations, this natural language engine provides human-readable explanations of incident stories. Analysts save time sharing incident information with other teams and reporting to their managers.

Read More

Network Infrastructure

DISH Wireless Awarded $50 Million NTIA Grant for 5G Open RAN Integration and Deployment Center

PR Newswire | January 16, 2024

DISH Wireless, a subsidiary of EchoStar, was awarded a historic $50 million grant from the U.S. Department of Commerce's National Telecommunications and Information Administration (NTIA) to establish the Open RAN Center for Integration & Deployment (ORCID). ORCID will allow participants to test and validate their hardware and software solutions (RU, DU and CU) against a complete commercial-grade Open RAN network deployed by DISH. "The Open RAN Center for Integration and Deployment (ORCID) will serve a critical role in strengthening the global Open RAN ecosystem and building the next generation of wireless networks," said Charlie Ergen, co-founder and chairman, EchoStar. "By leveraging DISH's experience deploying the world's first standalone Open RAN 5G network, ORCID will be uniquely positioned to test and evaluate Open RAN interoperability, performance and security from domestic and international vendors. We appreciate NTIA's recognition of DISH and ORCID's role in driving Open RAN innovation and the Administration's ongoing commitment to U.S. leadership in wireless connectivity." To date, this grant represents NTIA's largest award under the Public Wireless Supply Chain Innovation Fund (Innovation Fund). ORCID will be housed in DISH's secure Cheyenne, Wyoming campus and will be supported by consortium partners Fujitsu, Mavenir and VMware by Broadcom and technology partners Analog Devices, ARM, Cisco, Dell Technologies, Intel, JMA Wireless, NVIDIA, Qualcomm and Samsung. NTIA Administrator Alan Davidson and Innovation Fund Director Amanda Toman will join EchoStar Co-Founder and Chairman Charlie Ergen, EchoStar CEO Hamid Akhavan, EVP and Chief Network Officer Marc Rouanne and other stakeholders to announce the grant and tour a DISH 5G Open RAN cell site later today in Las Vegas. During this event, DISH will outline ORCID's unique advantages, including that it will leverage DISH's experience as the only operator in the United States to commercially deploy a standalone Open RAN 5G network. DISH and its industry partners have validated Open RAN technology at scale across the country; today DISH's network covers over 246 million Americans nationwide. At ORCID, participants will be able to test and evaluate individual or multiple network elements to ensure Open RAN interoperability, performance and security, and contribute to the development, deployment and adoption of open and interoperable standards-based radio access networks. ORCID's "living laboratory" will drive the Open RAN ecosystem — from lab testing to commercial deployment. Below are highlights of ORCID: ORCID will combine both lab and field testing and evaluation activities. ORCID will be able to test elements brought by any qualified vendor against DISH's live, complete and commercial-grade Open RAN stack. ORCID will use DISH's spectrum holdings, a combination of low-, mid- and high-band frequencies, enabling field testing and evaluation. ORCID will evaluate Open RAN elements through mixing and matching with those of other vendors, rather than validating a single vendor's stack. DISH's experience in a multi-vendor environment will give ORCID unique insights about the integration of Open RAN into brownfield networks. ORCID's multi-tenant lab and field testing will occur in DISH's secure Cheyenne, Wyoming facility, which is already compliant with stringent security protocols in light of its satellite functions. About DISH Wireless DISH Wireless, a subsidiary of EchoStar Corporation (NASDAQ: SATS), is changing the way the world communicates with the Boost Wireless Network. In 2020, the company became a nationwide U.S. wireless carrier through the acquisition of Boost Mobile. The company continues to innovate in wireless, building the nation's first virtualized, Open RAN 5G broadband network, and is inclusive of the Boost Infinite, Boost Mobile and Gen Mobile wireless brands.

Read More

Network Security

Ampliphae, HPE Athonet and Arqit deliver Quantum-Safe Private 5G using Symmetric Key Agreement

PR Newswire | January 19, 2024

Arqit Quantum Inc, a leader in quantum-safe encryption, and Ampliphae Ltd (Ampliphae), a leader in network cyber security solutions, have today announced successful completion of a project that will deliver enhanced quantum-safe security for Private 5G networks. The Security Enhanced Virtualised Networking for 5G (SEViN-5G) project, funded by Innovate UK, the UK Government’s innovation agency, leveraged Ampliphae’s network security analytics technology and Arqit’s Symmetric Key Agreement Platform to deliver a quantum-secure Private 5G testbed that can protect against both current and future cyber threats. Athonet, a Hewlett Packard Enterprise acquisition, provided the Radio Access Network (RAN) equipment for the project with a cloud core hosted on AWS. Private enterprise networks based on 5G cellular technology are accelerating digital transformation across industries including manufacturing, healthcare, defence and smart cities. Private 5G gives enterprises access to high-speed, massively scalable, and ultra-reliable wireless connectivity, allowing them to implement innovative IoT and mobile solutions that enhance productivity, drive automation and improve customer engagement. The security of these networks will be paramount as they will support safety-critical infrastructure and carry highly sensitive data. But like any new technology, 5G comes with potential new threats and security risks including the threat from quantum computing. The project finished in December 2023 and customer engagement has already begun. David Williams, Arqit Founder, Chairman and CEO said: “Enterprises want to deploy Private 5G networks with complete confidence that they will be safe from both current and future cyber threats including from quantum computers. Working alongside Ampliphae, we have shown that a quantum-safe Private 5G network is deliverable using Arqit’s unique encryption technology.” Trevor Graham, Ampliphae CEO said: “Private 5G can be hosted partly or completely in the Cloud, giving enterprises the opportunity to rapidly set up their own cellular networks customised to support their operations. With Ampliphae and Arqit they can now be certain that those Private 5G networks are monitored and secure against eavesdropping and disruption.” Nanda Menon, Senior Advisor Hewlett Packard Enterprise said: “In an era where security is paramount, the completion of the SEViN-5G project is a significant milestone. The delivery of a quantum-secure Private 5G testbed, achieved where Athonet have combined the Athonet core with CableFree radios, underscores the commitment to innovation and reinforces the confidence enterprises can have in deploying networks that are both cutting-edge and secure from both present and future threats.” About Arqit Arqit Quantum Inc. (Nasdaq: ARQQ, ARQQW) (Arqit) supplies a unique encryption Platform as a Service which makes the communications links of any networked device, cloud machine or data at rest secure against both current and future forms of attack on encryption – even from a quantum computer. Compliant with NSA standards, Arqit’s Symmetric Key Agreement Platform delivers a lightweight software agent that allows devices to create encryption keys locally in partnership with any number of other devices. The keys are computationally secure and operate over zero trust networks. It can create limitless volumes of keys with any group size and refresh rate and can regulate the secure entrance and exit of a device in a group. The agent is lightweight and will thus run on the smallest of end point devices. The Product sits within a growing portfolio of granted patents. It also works in a standards compliant manner which does not oblige customers to make a disruptive rip and replace of their technology. Recognised for groundbreaking innovation at the Institution of Engineering and Technology awards in 2023, Arqit has also won the Innovation in Cyber Award at the National Cyber Awards and Cyber Security Software Company of the Year Award at the Cyber Security Awards. Arqit is ISO 27001 Standard certified. www.arqit.uk About Ampliphae Ampliphae’s distributed network analytics technology provides insight into how networks are used to support enterprise operations at every level. A graduate of the prestigious LORCA cyber accelerator in London, and the AWS European Defence Accelerator, Ampliphae’s technology is already used by enterprises across multiple verticals to discover, analyse and secure the network traffic that supports their key applications and business processes. Ampliphae’s Encryption Intelligence product operates at enterprise scale to discover devices and applications that use cryptography, analysing their encryption capabilities to detect risks, including assets that are vulnerable to future quantum computer attack. Using Encryption Intelligence, the organisation can gather effective operational intelligence about their encryption landscape, both within and outside the organisation, and build an effective mitigation program to address current and future vulnerabilities.

Read More

Network Security

Cato Networks Introduces World's First SASE-based XDR

PR Newswire | January 25, 2024

Cato Networks, the leader in SASE, announced the expansion of the Cato SASE Cloud platform into threat detection and incident response with Cato XDR, the world's first SASE-based, extended detection and response (XDR) solution. Available immediately, Cato XDR utilizes the functional and operational capabilities of the Cato SASE Cloud to overcome the protracted deployment times, limited data quality, and inadequate investigation and response experience too often associated with legacy XDR solutions. Cato also introduced Cato EPP, the first SASE-managed endpoint protection platform (EPP/EDR). Together, Cato XDR and Cato EPP mark the first expansion beyond the original SASE scope pioneered by Cato in 2016 and defined by industry analysts in 2019. SASE's security capabilities encompassed threat prevention and data protection in a common, easy-to-manage, and easy-to-adopt global platform. With today's announcement, Cato is expanding SASE into threat detection, incident response, and endpoint protection without compromising on the architectural elegance captured by the original SASE definition. "Cato SASE continues to be the antidote to security complexity," says Shlomo Kramer, CEO and co-founder of Cato Networks. "Today, we extend our one-of-a-kind SASE platform beyond threat prevention and into threat detection and response. Only Cato and our simple, automated, and elegant platform can streamline security this way." An early adopter of Cato XDR is Redner's Markets, an employee-owned supermarket chain headquartered in Reading, Pennsylvania, with 75 locations. Redner's Markets' vice president of IT and Infrastructure, Nick Hidalgo, said, "The Cato platform gave us better visibility, saved time on incident response, resolved application issues, and improved network performance ten-fold." (Read more about Redner's Markets and Cato in this blog. "The convergence of XDR and EPP into SASE is not just another product; it's a game-changer for the industry," said Art Nichols, CTO of Windstream Enterprise, a Cato partner. "The innovative integration of these capabilities brings together advanced threat detection, response capabilities, and endpoint security within a unified, cloud-native architecture—revolutionizing the way enterprises protect their networks and data against increasingly sophisticated cyber threats." (Read more about what Cato partners are saying about today's news in this blog.) Platform vs. Product: The Difference Matters Cato XDR takes full advantage of the enormous benefits of the Cato SASE Cloud platform, the first platform built from the ground up to enable enterprises to connect, secure, and manage sites, users, and cloud resources anywhere in the world. Unlike disjointed point solutions and security appliances, Cato capabilities are instantly on, always available at scale, and fully converged, giving IT teams a single, shared context worldwide to understand their networks, prevent threats, and resolve problems. As an autonomous platform, Cato SASE Cloud sustains its evolution, resiliency, optimal performance, and security posture, saving enterprises the operational overhead of maintaining enterprise infrastructure. Enterprises simply subscribe to Cato to meet their business needs. Cato's cloud-native model revolutionized security and networking operations when it was introduced in 2016, a fact validated three years later in 2019 when the Cato approach was formally recognized by the industry as SASE. Breach Times Still Too Long; Limitations of Legacy XDR Cato is again revolutionizing cybersecurity with the first SASE platform to expand into threat detection, empowering security teams to become smarter and remediate incidents faster. The flood of security alerts triggered by network sensors, such as firewalls and IPS, complicates threat identification. In 2023, enterprises required 204 days on average to identify breaches.1 XDR tools help security analysts close this gap by ingesting, correlating, and contextualizing threat intelligence information with the data from native and third-party sensors. However, legacy XDR tools suffer from numerous problems relating to data quality. Sensor deployment extends the time-to-value as IT must not only install the sensors but also develop a baseline of specific organizational activity for accurate assessments. Data quality is also compromised when importing and normalizing third-party sensor data, complicating threat identification and incident response. Security analysts waste time sorting through incident stories to identify the ones most critical for immediate remediation. Once determined, incident remediation is often hampered by missing information, requiring analysts to master and switch between disparate tools. No wonder in 2023, average breach containment required more than two months.1 Cato XDR and Cato EPP Expands the Meaning of SASE Cato XDR addresses legacy XDR's limitations. Instantly activated globally, Cato XDR provides enterprises with immediate insights into threats on their networks. Incident detection is accurate due to Cato's many native sensors – NGFW, advanced threat prevention (IPS, NGAM, and DNS Security), SWG, CASB, DLP, ZTNA, RBI, and now EPP/EDR. Powered by Bitdefender's world-leading malware prevention technology, Cato EPP protects endpoints from attack – in the Cato way. Endpoint threat and user data are stored in the same converged Cato data lake as the rest of the customer's network data, simplifying cross-domain event correlation. The result is incredibly high-quality data that improves the incident identification and remediation process. Cato AI uses the data to accurately identify and rank incidents, empowering analysts to focus critical resources on an organization's most important remediation cases. Cato AI is battle-tested and proven across years of threat hunting and remediation handling by Cato MDR service agents. Remediation times reduce as detected incident stories contain the relevant information for in-depth investigation. Cato's tools sit in the same console as the native engines, enabling security analysts to view everything in one place -- the current security policy and the reviewed story. Finally, incident reporting is simplified with generative AI. Purpose-built for investigations, this natural language engine provides human-readable explanations of incident stories. Analysts save time sharing incident information with other teams and reporting to their managers.

Read More

Network Infrastructure

DISH Wireless Awarded $50 Million NTIA Grant for 5G Open RAN Integration and Deployment Center

PR Newswire | January 16, 2024

DISH Wireless, a subsidiary of EchoStar, was awarded a historic $50 million grant from the U.S. Department of Commerce's National Telecommunications and Information Administration (NTIA) to establish the Open RAN Center for Integration & Deployment (ORCID). ORCID will allow participants to test and validate their hardware and software solutions (RU, DU and CU) against a complete commercial-grade Open RAN network deployed by DISH. "The Open RAN Center for Integration and Deployment (ORCID) will serve a critical role in strengthening the global Open RAN ecosystem and building the next generation of wireless networks," said Charlie Ergen, co-founder and chairman, EchoStar. "By leveraging DISH's experience deploying the world's first standalone Open RAN 5G network, ORCID will be uniquely positioned to test and evaluate Open RAN interoperability, performance and security from domestic and international vendors. We appreciate NTIA's recognition of DISH and ORCID's role in driving Open RAN innovation and the Administration's ongoing commitment to U.S. leadership in wireless connectivity." To date, this grant represents NTIA's largest award under the Public Wireless Supply Chain Innovation Fund (Innovation Fund). ORCID will be housed in DISH's secure Cheyenne, Wyoming campus and will be supported by consortium partners Fujitsu, Mavenir and VMware by Broadcom and technology partners Analog Devices, ARM, Cisco, Dell Technologies, Intel, JMA Wireless, NVIDIA, Qualcomm and Samsung. NTIA Administrator Alan Davidson and Innovation Fund Director Amanda Toman will join EchoStar Co-Founder and Chairman Charlie Ergen, EchoStar CEO Hamid Akhavan, EVP and Chief Network Officer Marc Rouanne and other stakeholders to announce the grant and tour a DISH 5G Open RAN cell site later today in Las Vegas. During this event, DISH will outline ORCID's unique advantages, including that it will leverage DISH's experience as the only operator in the United States to commercially deploy a standalone Open RAN 5G network. DISH and its industry partners have validated Open RAN technology at scale across the country; today DISH's network covers over 246 million Americans nationwide. At ORCID, participants will be able to test and evaluate individual or multiple network elements to ensure Open RAN interoperability, performance and security, and contribute to the development, deployment and adoption of open and interoperable standards-based radio access networks. ORCID's "living laboratory" will drive the Open RAN ecosystem — from lab testing to commercial deployment. Below are highlights of ORCID: ORCID will combine both lab and field testing and evaluation activities. ORCID will be able to test elements brought by any qualified vendor against DISH's live, complete and commercial-grade Open RAN stack. ORCID will use DISH's spectrum holdings, a combination of low-, mid- and high-band frequencies, enabling field testing and evaluation. ORCID will evaluate Open RAN elements through mixing and matching with those of other vendors, rather than validating a single vendor's stack. DISH's experience in a multi-vendor environment will give ORCID unique insights about the integration of Open RAN into brownfield networks. ORCID's multi-tenant lab and field testing will occur in DISH's secure Cheyenne, Wyoming facility, which is already compliant with stringent security protocols in light of its satellite functions. About DISH Wireless DISH Wireless, a subsidiary of EchoStar Corporation (NASDAQ: SATS), is changing the way the world communicates with the Boost Wireless Network. In 2020, the company became a nationwide U.S. wireless carrier through the acquisition of Boost Mobile. The company continues to innovate in wireless, building the nation's first virtualized, Open RAN 5G broadband network, and is inclusive of the Boost Infinite, Boost Mobile and Gen Mobile wireless brands.

Read More

Events