한국정보보호학회

MobiSec 2021

The talk addresses the changing world of security systems, and the possible approaches to their improvement through the usage of Artificial Intelligence and Machine Learning-based techniques. Although many security aspects are addressed, the talk will be focused on addressing networking security issues. The concept of "Networking Cognitive Security" is mainly explored from three different perspectives and implementation levels, namely:

a) Network-level, by considering only data flowing in a network in order to perform Traffic Classification and Anomaly Detection;

b) Application-level, by modeling the behavior of apps in order to detect suspect behaviors.

c) Social-level, by modeling the behavior of entities involved in social communities in order to detect unfair uses of social networks.

For each of these levels, theoretical aspects and implementation details will be shown. In particular, solutions based on Deep Neural Network architectures and ad-hoc intelligent algorithms will be shown.

Particular attention is given to the inner behavior of Deep Neural Networks. In this regard, a formal mathematical exploration of inner processes behind neural network architectures are shown in order to provide a useful understanding of how each neural component affects network performance. This allows improving the skill of a neural network designer to provide improvements in reliability and performance of security systems. These aspects are presented with reference to many security systems developed in our research group making use of Convolutional Neural Networks, Recurrent Neural Networks, Autoencoders, and their combinations as well as specific algorithms also based on evolutionary approaches to solve constrained optimization problems, and more.

Comments and future challenges will conclude the talk.

IoT devices and the emergence of 5G in our daily lives are bringing new data-driven and increasingly autonomous scenarios. There is new possibilities of highly distributed processing capacities from IoT-Edge-Cloud in a continuum. New services require efficient and effective management of computing and network resources what means to deal with huge amounts of data and at different levels of the future NG infrastructure. In this context there is a need for configuration, architecture and coordination of processing nodes at different levels what has an impact over security of the 5G infrastructure but also for the new data processing. In this talk several areas of intelligent management and AI and security procedures will be presented to support heterogeneous processing infrastructures in 5G and beyond 5G networks based on the results of some EU project.

NESAS, jointly defined by 3GPP and GSMA, provides an overall security assurance framework for improving security levels in the mobile industry. This scheme not only suggests security requirements and an assessment framework for secure product development and lifecycle processes, but also supports the security evaluation of network equipment through 3GPP defined security test cases. It is expected that NESAS will play the important role of a security baseline proving that network equipments satisfy a list of security requirements and achieve security assurance.

This talk will introduce the overall NESAS process and evaluation framework whose details are as follows:
(1) Philosophy on how NESAS handle equipments designed to support functions that are defined by 3GPP and deployed by mobile network operators on their networks.
(2) Security assessments of vendor development and product lifecycle processes
(3) Security evaluations of network products.
(4) Differences from the existing equipment certification method.

5G technology is expected to push mobile communications beyond the domain of just mobile devices, expanding to endpoints that can directly impact day-to-day safety, which includes the vehicles of tomorrow. Autocrypt CSO Jaeson Yoo will illustrates what 5G means for vehicles and the future of transportation, utilizing what user case scenarios can be expected. Jaeson will also discuss 5G’s implications for connected and autonomous driving, innovations in Local Dynamic Map (LDM) technology, data governance issues, and the cybersecurity requirements that must be addressed to ensure safety for tomorrow's roads.