Systems and methods for providing shifting network security via multi-access edge computing

A system comprising:

• a first network point of access;
• a second network point of access;
• and
• one or more devices configured to:
• receive a plurality of data packets via a first network path that connects to the first network point of access, and via a second network path that connects to the second network point of access;
• detect that a first set of the plurality of data packets originating from the first network point of access do not satisfy an attack signature, and that a second set of the plurality of data packets originating from the second network point of access satisfy the attack signature based on the second set of data packets comprising irregular addressing or irregular request patterns;
• retrieve an Internet Protocol (“IP”) address that is assigned to each user equipment (“UE”) of a set of UEs accessing a network via the second network point of access, and a network usage by each UE of the set of UEs;
• determine a mismatch between the network usage by a particular UE of the set of UEs and a computed usage from a subset of the second set of data packets comprising the IP address that is assigned to the particular UE, wherein the network usage by the particular UE comprises an amount of bandwidth or network capacity utilized by the particular UE at the second network point of access, wherein the computed usage comprises an amount of bandwidth or network capacity utilized by the subset of the second set of data packets comprising the IP address that is assigned to the particular UE, and wherein determining the mismatch comprises determining that the amount of bandwidth or network capacity utilized by the particular UE at the second network point of access is greater than the amount of bandwidth or network capacity utilized by the subset of the second set of data packets;
• and
• implement attack protections against the particular UE by disabling network access, throttling network access, or blocking one or more data packets originating from the particular UE at the second network point of access using a unique identifier of the particular UE that is different than the IP address that is assigned to the particular UE.

A non-transitory computer-readable medium, storing a set of processor-executable instructions, which, when executed by one or more processors, cause the one or more processors to:

• receive a plurality of data packets via a first network path that connects to a first network point of access, and via a second network path that connects to a different second network point of access;
• detect that a first set of the plurality of data packets originating from the first network point of access do not satisfy an attack signature, and that a second set of the plurality of data packets originating from the second network point of access satisfy the attack signature based on the second set of data packets comprising irregular addressing or irregular request patterns;
• retrieve an Internet Protocol (“IP”) address that is assigned to each user equipment (“UE”) of a set of UEs accessing a network via the second network point of access, and a network usage by each UE of the set of UEs;
• determine a mismatch between the network usage by a particular UE of the set of UEs and computed usage from a subset of the second set of data packets comprising the IP address that is assigned to the particular UE, wherein the network usage by the particular UE comprises an amount of bandwidth or network capacity utilized by the particular UE at the second network point of access, wherein the computed usage comprises an amount of bandwidth or network capacity utilized by the subset of the second set of data packets comprising the IP address that is assigned to the particular UE, and wherein determining the mismatch comprises determining that the amount of bandwidth or network capacity utilized by the particular UE at the second network point of access is greater than the amount of bandwidth or network capacity utilized by the subset of the second set of data packets;
• and
• implement attack protections against the particular UE by disabling network access, throttling network access, or blocking one or more data packets originating from the particular UE at the second network point of access using a unique identifier of the particular UE that is different than the IP address that is assigned to the particular UE.