Technical Challenges of Privacy, Reliability, and Security Dr. Marcus Brunner Head of Standardization, Eco-system Development, and Open Source Swisscom

Measurability and Provability To achieve more secure, privacy aware networks –Rely on competition, which requires a certain level of measurability –A key business driver is having a competitive advantage and being able to market it Provability of security –A posteriori, I can prove that something happened –A priori, I can “prove” that the quality is on the requested level

User Experience and Interface End-user do not understand anymore what is going on –What happens with my data? –How save are they and to whom I actually have to trust about handling it correctly? –Whom to trust telco/network, end-system, server/cloud provider –Worse in case of any type of proxying Usability –For an end-user it is very unclear who has access to what data –What usage rights everybody in the chain has –Most of the time it is unclear to the user whether he is secure or not

Reliability Today it is mainly a game in mobile coverage and per-node reliability Is a traditional parameter in an SLA –Challenge to differentiate the reliability for different product offerings, based on the same platform Virtualization and automated control enables networks to build reliability at another layer –Is this more cost-effective or has better properties –What is the required platform reliability?

Applications to 5G and Virtualization Non-SIM/Non-HW ? –Is software-only possible from a security perspective for network access, service access, fraud prevention, etc. Pattern recognition on encrypted packets –What can be said about encrypted traffic –For some traffic management applications in the network it might be good enough Several layers of virtualization and/or abstraction –Nested virtualization technologies are security-wise a challenge –Specifically, hardware oriented approaches, since virtualization is abstracting away the hardware

Various PKI –CA as single point of failure –Trust in Internet in general Next generation crypto –Applicability of new crypto technology –Quantum-proof crypto-algorithms –Future proof of our security solutions in practice? Block chain –Applicability to various use cases possible beyond crypto-money? Everything encrypted by browser/application –http 2.0 and proxying –Customer associates security with telco