| | DECEMBER 2020ENTERPRISE SECURITY8IN MY OPINIONIN MY OPINIONCloudification of Communications Service Provider (CSP) network is imminentThe concept of cloud has become ubiquitous and has made inroads into the networks of communications service providers (CSPs). 5G will create new cloud-based applications and opportunities that are unviable with current network blueprints. CSPs in the past have always questioned migrating the network functions in their entirety to a public cloud as they are often sceptical of its security, however no CSP can discount that hybrid cloud strategy will be a corner stone for their 5G plans. In the 5G realm, it is important to remember that networks will become programmable so the power of cloud will be needed to future proof the network and drive the costs down taking advantage of economies of scale. This is the only way CSPs can exploit the 5G metamorphosis - by embracing a holistic and secure hybrid cloud strategy. The Telco CloudThe telco cloud is based on the predominant idea of cloudifying network elements of CSPs to create anameliorated experience and scalability. Currently the network functions are an integration of hardware, software, applications, and data. This approach is resource intensive and not scalable for the new digital world. This is now creating a scenario where legacy orchestration solutions are separated from the digital infrastructure vis-a-vis the cloud, virtualization, and containers.An effective integration of these domains (orchestration and infrastructure) is possible through the telco cloud. Open-source platforms are gaining popularity in these two worlds. These platforms will help bring down the Total Cost of Ownership but will add additional complexities. Many CSPs are already contemplating a unified digital infrastructure across network functions and IT applications to exploit the above-mentioned levers. What are the possible vulnerabilities and threat vectors in a telco cloud?Telco cloud environment will be intricate and heterogeneous, including multiple tiers, technologies, deployment models, applications/network functions and APIs. The diversity of cloud computing models poses a securityrisk where different types of attacks are now targeting the cloud infrastructure. Static, manual and perimeter security are obsolete and ineffective for dynamic clouds. Security breaches will have serious ramifications for CEOs and other key stakeholders. The threat vectors are ever expanding. Prevention is more desirable than Securing Telco Cloud for the 5G eraBy Srinivas Bhattiprolu, Head of Advanced Consulting Service, Nokia SoftwareSrinivas Bhattiprolu
< Page 7 | Page 9 >