BT has one of the largest networks in the world. It serves almost 200 countries and territories with one terabyte of data passing through its network every second. However, operating on a global scale also carries the risk of cyber-attacks. Between April and June 2019, an average of 111 million connections to malware sites every month have been blocked.
As a network service provider, BT's expertise is in analysing and understanding traffic and data flows across both public and corporate networks. It processes 600,000 events per second in its cyber security platform to proactively hunt threats in real time. With this information, BT can then understand how and where to put controls in place and how to detect anomalous behaviour that could be an early indicator of an attack.
The BT Cyber Index gives a high-level view of cyber threats that the network protects users from every day and shows some challenges it is working against. It includes DDoS alerts, phishing sites taken down, scam activity and malware sites blocked. Given the breadth of BT's network, this gives an indicative view of the wider security ecosystem and a snapshot of the growing threat landscape.
Building awareness of cyber issues is key for improving defenses. It makes people and organisations put more emphasis on online security and makes it more difficult for cyber criminals to operate. For instance, the growing number of phishing attacks has driven the network to do more internal education and training on what to look out for and how to report suspect emails.
Over time, the Index will also give a more insightful, long-term view of the trends and developments in cyber security. BT is working to add further categories and measurements to provide insight on more types of cyber-attacks.