The experience of BT in child online protection

1
The experience of BT in child online protection

• Nick Truman, Head of Internet Security
• BT Retail
• BT

2
Overview

• The Internet Watch Foundation (IWF)
• Working with the IWF
• BT Cleanfeed Why do it?
• What is the initiative?
• BT Cleanfeed How does it work?
• BT Cleanfeed The future
• Online and offline education
• Abuse management

3
IWF Remit Role

• Remit
• Child abuse images hosted anywhere in the world
• Criminally obscene content hosted in the UK
• Criminally racist content hosted in the UK

4
IWF Remit Role

• Role
• Foster trust and confidence in the internet
  among current and future internet users
• Hotline
• Assist service providers in combat of systems
  abuse
• Notice takedown service
• Newsgroups policy development
• Acting as a relevant authority (S46 SOA 2003
  MoU)
• Assist LEAs in the fight against criminal
  content.
• Info to partner hotlines across the world
• Info to LEAs across the world via Interpol
• Website http//www.iwf.org.uk

5
Working with the IWF

• Initiative needs IWF and IWF list to work
• Essential to have continued Government support
  and a close relationship between IWF, Industry
  and Government
• The initiative was a new use for the IWF list.
  Concern that this will bring additional scrutiny
• BT has access to the list within its membership
  of the IWF but restricts visibility and
  circulation with in the company
• Agreed appeal and audit process

6
BT Cleanfeed What does it do?

• Mandatory blacklist on all Web browsing (i.e.
  Port 80) traffic for all BT customers
• Blacklist is taken from the IWF BLIND database,
  in an enciphered, machine only readable, form -
  updated daily
• Customers accessing a blacklisted site see
  normal error page - Error 404 Website not
  found
• No record is kept of originating addresses of
  blocked access attempts
• The blacklist filter works on an EXACT MATCH of
  the IWF listed URL. It can discriminate to
  site/sub-site/page or even individual image

7
BT Cleanfeed How does it work ?

• Block all outbound traffic at UK transit points
  to URLs on the IWF list
• Most immediate challenges
• List operates at URL not just dealing with IP
  address
• Over 10Gbps of traffic to examine and growing
  rapidly
• IWF list constantly changing
• More subtle challenges
• Bespoke OSS processing and automation challenge
• Working under a veil of secrecy
• Working with new server infrastructure and
  applications

8
Key Policy Considerations

• BT is well aware that there may be mixed comment
  on such an initiative
• Stance is strictly a legal one, based on unique
  treatment of child sexual abuse images in UK law
• BT has done this on own initiative. It would be
  for other to call for an extension of this,
  either to other ISPs or to other content
• BT does not view this as a marketing opportunity,
  and essentially this was meant to be a low
  profile project

9
BT Cleanfeed Platform In Life

• BT is absolutely delighted with the performance
  and stability
• After initial teething issues, platform is now
  working as expected
• 45k hits per day on barred URLs
• accidental hits, e.g. from search engines
• incidental hits, e.g. from forwarding from other
  adult sites
• deliberate hits.
• traffic via open proxies
• traffic via spam

10
Other ISPs deployment

• Every ISP is different - there is no such thing
  as a standard networking arrangement
• As the design is principally implemented at the
  peering layer, implementation at that layer may
  hold the greatest promise
• For UK BT Wholesale peering customers (BT Net)
  could, in principle, use the existing BT platform
• Commercial arrangements and IWF licence issues
• Copy the BT design direct
• Copy and modify the BT Design to suit ISP network
  topology

11
BT Cleanfeed The Future

• Continue to share the technology with ISPs and
  interested parties
• Continue to develop and strengthen the processes
  and technology
• Ensure that the scope creep is challenged
• Consider new applications

12
Online and Offline Education

• Too much reliance on technology
• Raising awareness in partnership
• Internet Green Cross Code
• Simple, non technical and generic
• Low cost but effective
• Age neutral
• Based on an existing publicly accepted road
  safety campaign
• Produced by BT but endorsed by industry,
  Government, Police and Childrens Charities

13
(No Transcript)
14
(No Transcript)
15
Get Safe Online 2007 - 2010
16
What is Get Safe Online?

• A Government private sector initiative that has
  delivered the UKs first national internet
  security awareness campaign
• A not-for-profit company, limited by guarantee -
  UK Government, the National Hi-Tech Crime Unit
  representing UK Law Enforcement and several
  leading businesses in the UK
• A three year campaign to help computer users,
  consumers and micro-businesses use the Internet
  safely
• Website http//www.getsafeonline.org/

17
Abuse (customer security) Management

• Coherent enforceable policies
• Mandate on product design and development
• Accountability and traceability to ensure that
  all branded Internet and application usage is
  identifiable
• Without invasion of privacy
• Senior management buy-in
• Pan industry intelligence and cooperation

18
Thank you

• Email nick.truman_at_bt.com
• Tel [phone]