This document discusses Net2Vec, a deep learning technique for 5G network security. Net2Vec uses natural language processing on sequences of network destinations to map them to geometric spaces. This allows it to detect anomalous sequences that may indicate malware or compromised devices in smart homes and networks, helping to improve security.

1. Net2Vec
Deep Learning
for 5G
network security
Roberto Bifulco
roberto.bifulco@neclab.eu

2. 2 © NEC Corporation 2019
How many
“smart”
devices do
you have,
right now?
2

3. 3 © NEC Corporation 2019
How many “smart”
devices do you
have, at home?
2+3
Tablet
TV
Home Router

4. 4 © NEC Corporation 2019
How many
“smart”
devices
will you
have,
tomorrow?
>10Tablet, TV, Home Router,
Dishwasher, Vacuumcleaner,
Home assistant, SmartLightbulb,
SmartPlug, SmartWatch, Fridge,
Air Conditioneer, VideoGame
console, …

5. 5 © NEC Corporation 2019
Who checks them?
Who updates them?
Who fixes them?
After a while,
nobody

6. 6 © NEC Corporation 2019
Who cares?
THE POWER GRID

7. 7 © NEC Corporation 2019
What can we
do?
It’s time to
get serious

8. 8 © NEC Corporation 2019
Smart Home Malware
delivery
website
Compromised AD

9. 9 © NEC Corporation 2019
Smart Home

10. 10 © NEC Corporation 2019
Net2Vec makes
the bad ones sad

11. 11 © NEC Corporation 2019
Smart Home
Net2Vec

12. 12 © NEC Corporation 2019
User
a b c v
a b c v
A sequence of
destinations
How are these destinations
related to each other?

13. 13 © NEC Corporation 2019
destinationssequences
Image from: https://link.springer.com/article/10.1007/s11192-010-0303-8
destinations

14. 14 © NEC Corporation 2019
In 1 week,
2 millions of
destinations

15. 15 © NEC Corporation 2019
2*106 x 2*106 =
4*1012
4Bytes * 4*1012
=16TeraBytes

16. 16 © NEC Corporation 2019
You
cannot
afford
it!

17. 17 © NEC Corporation 2019
“Hello, how are you?”
“Hello, I’m good!”
Natural language processing
“10001010100010…”
“11111010101010…”
Natural language processing
for non natural language

18. 18 © NEC Corporation 2019
A user surfing the web
aa.com
bb.com
cc.com
Smart Tv running apps
11.com
22.com
33.com
IP cam sending data to web servers
xx.com
yy.com
zz.com
Destinations sequence
AI model for
natural language processing

19. 19 © NEC Corporation 2019
abc.com
bbb.eu
ddd.com
xyz.com
Geometric space
Domains list

20. 20 © NEC Corporation 2019
Distance from
cluster’s center
2’900 (+350%) new unknown
malicious domains, looking only
at 2.7% of the total observed
Baddomains

21. 21 © NEC Corporation 2019
The web is a big
place to hide…
Net2Vec
tells you where
to look