Wireless network that discovers hotspots for cyberattacks based on social media data
AssigneeT-Mobile USA, Inc.
InventorVenson Shaw
Life of this patent
Estimating the term…
Abstract
A method to prevent or reduce cyberattacks can include analyzing information of users of a 5G network. The information can include user profile data and social media data. The method can further include ranking the users according to a network security ranking based on a social media ranking, to identify target users as potential hotspots for cyberattacks. The 5G network dynamically assigns computing resources based on the network security ranking to monitor computing device(s) associated with the target users and receives an indication of a malicious software of the computing device(s) as detected by the computing resources.
Claims20
A method of preventing or reducing cyberattacks using, in part, a 5G cellular communications network, the method comprising:
- analyzing, by the 5G cellular communications network, information of multiple users,
- wherein the information includes user profile data stored at a unified data management (UDM) database, and
- wherein the information further includes social media data of social media platforms;
- ranking the users according to a network security ranking based on a social media ranking to identify target users as potential hotspots for cyberattacks,
- wherein a social media account of a target user with a status exceeding a threshold is indicative of a potential hotspot for a cyberattack, and
- wherein the status and the threshold are determined based on a type of the social media platform associated with the social media account;
- dynamically assigning, by the 5G cellular communications network, computing resources based on the network security ranking to monitor one or more computing devices associated with the target users identified as the potential hotspots for the cyberattacks,
- wherein the one or more computing devices includes a wireless mobile device;
- and
- receiving an indication of a malicious software of the one or more computing devices associated with at least one of the target users identified as the potential hotspots for the cyberattacks,
- wherein the malicious software is detected by the computing resources.
At least one non-transitory computer-readable storage medium storing instructions to be executed by at least one processor, wherein execution of the instructions cause a system to:
- obtain user profile data of subscribers to a wireless network from a database of a core node;
- obtain social media data of the subscribers from a social media database, wherein the social media data indicates that the subscribers are members of social media platforms;
- identify an indication of a quantity of existing connections between each subscriber and other members of the social media platforms;
- rank each subscriber based on the subscriber's quantity of existing connections such that a subscriber with more connections is ranked higher than another subscriber with fewer connections;
- allocate computing resources to monitor one or more computing devices associated with subscribers that exceed a threshold rank;
- inject social media traffic for social media accounts associated with the subscribers that exceed the threshold rank,
- wherein the injected social media traffic induces a cyberattack associated with a social media account;
- and
- receive an indication of a potential cyberattack identified by the one or more computing devices associated with at least one of the subscribers that exceeds the threshold rank.
A system comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory stores instructions which, when executed by the processor, cause the system to:
- rank users of a wireless network based on social media data stored at a unified data management (UDM) database;
- identify a target user with a rank that exceeds a threshold rank as a potential hotspot for cyberattacks,
- wherein the threshold rank corresponds to a status indicated by the social media data, and
- dynamically assign computing resources to monitor one or more computing devices associated with the target user identified as the potential hotspot for the cyberattacks;
- and
- receive an indication of malicious activity of the one or more computing devices associated with the target user identified as the hotspot for the cyberattacks, wherein the malicious activity is detected by the computing resources.
Dependencies are inferred from the claim text.