1.1 Introduction to iTrust and the eBusiness Environment

The Internet protocol (IP) is open, offering ubiquitous access to BT systems and data for BT people and BT's customers. It is this very openness which presents tremendous opportunities for eCommerce. The downside, however, is that IP exposes BT to harmful attacks. The purpose of the iTrust Programme is to provide cost-effective protection to BT systems and data. It is a large programme involving the implementation of several software packages. There is a phased approach to implementation.

iTrust aims to minimise the damage and costs of attempted security breaches in an increasingly hostile environment; it has two main elements:

• replacement over time of the current disconnected security measures deployed for individual systems with an integrated strategic scheme this would solve the growing problems of accessing multiple systems and would avoid escalating essential security administration costs;

• additional measures on the external firewall, and completion of a pilot system both to defend against internal hacking and to provide a second line of defence against external intrusion.

This chapter describes activity under way to support the former.

During the year 2000 the current BT firewall turned away three times the number of unauthorised entry attempts as it had in the previous year. Most of these are harmless but some are recognisably deliberate and serious enough to merit investigation by BT Security. New threats appear regularly.

BT invests substantially to secure data on its operational...