Dynamic and selective response to cyber attack for telecommunications carrier networks

A method, comprising:

• receiving, by a system comprising a processor, network traffic, wherein the system does not have a network address resulting in the system being network transparent;
• and
• in response to determining, by the system, data of the traffic stream indicative of a network attack,
• adapting an access privilege corresponding to a mobile device, wherein the access privilege controls a first data rate of a first portion of the network traffic, corresponding to the network attack, between the mobile device and a gateway device of a network, and
• initiating disabling of a first feature of the mobile device, wherein the first feature is a source of the first portion of the network traffic corresponding to the network attack.

A machine-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

• receiving, by a device that does not have a network address causing it to be network transparent, network traffic data;
• and
• in response to determining, from the network traffic data, that a probability of a network attack occurring satisfies a rule related to detecting the network attack,
• adapting an access privilege corresponding to a wireless user equipment, wherein the access privilege controls a first data rate of a first portion of the network traffic, corresponding to the network attack, between the wireless user equipment and a gateway device of the network;
• and
• initiating disabling of a first feature of the wireless user equipment, wherein the first feature is a source of the first portion of the network traffic corresponding to the network attack.