AI

Proactive by Design: How AI can Secure Whole Networks

By Mark de Haan, SVP Wholesale, Europe & APAC, GTT

Global cyber threats are evolving at an alarming rate. According to WEF, they are more frequent, more unpredictable and increasingly capable of causing mass disruption.  

As the global economy becomes more reliant on digital infrastructure, the need for secure and resilient networks has never been greater. Robust cybersecurity is no longer a reactive measure; it is a strategic necessity that spans infrastructure, compliance and geopolitics. It requires a proactive approach to detect anomalies before damage is done.  

In the first quarter of 2025, there has been a drastic increase in the number of Distributed Denial of Service (DDoS) attacks, largely driven by the growing sophistication and commoditisation of threat tools. DDoS attacks, once the preserve of skilled actors, are now available as-a-service, enabling bad actors to launch targeted, large-scale attacks with minimal expertise. This trend has placed wholesale networks, the backbone of global internet connectivity, as a viable target for cyberattacks. To remain resilient, providers must shift from passive defence mechanisms to predictive, AI-driven security strategies.  

Wholesale networks play a vital role in connecting the digital world as we know it. From enabling instant transactions in global finance, to supporting real-time production systems in manufacturing, wholesale networks underpin the digital operations of almost every sector. Offering high-capacity links, peering arrangements, and transit services that facilitate seamless data flow across different regions and providers.  

Their design emphasises openness and scalability, qualities that power global connectivity but also create significant risk. These networks are inherently multi-tenant and decentralised, meaning a single breach or anomaly can disrupt not just one provider’s infrastructure but ripple across customers, partners, and entire ecosystems.  

The Critical Question in Wholesale Networks 

So, the question becomes: how can wholesale operators retain the openness and performance their networks are built on, while ensuring robust security? 

Customers demand low-latency performance, with the assurance of secure infrastructure and defence against the spread of any malicious traffic. However, this is increasingly difficult as attack surfaces continue to grow, and cyber threats evolve rapidly to overcome, or overwhelm, preventative measures.  

On top of this, the regulatory landscape continues to shift. With the geopolitical and regulatory landscape continuing to change from region to region, 64% of IT Leaders are concerned about data sovereignty. Providers are being asked not only to defend data but also to prove where it travels, where it is stored, and who governs it. 

Traditional defences are increasingly challenged by the speed and complexity of today’s threats. While signature-based detection and rule-based thresholds may still have a place, they often fall short against dynamic, low-volume, and multi-vector attacks. Recognising this, network providers are now applying AI and machine learning across their global backbone to enhance visibility and accelerate response times. By moving beyond reactive processes, and enabling real-time traffic analysis, network providers can automate threat identification, and dynamic mitigation, empowering customers to feel secure without compromising on performance. 

AI as a Network Security Tool 

AI is proving essential in the next generation of wholesale network security. It can continuously monitor traffic patterns, detect subtle deviations, and recognise anomalous behaviours before they escalate into full-blown attacks. Unlike traditional tools, AI doesn’t wait for a known threat to appear; it predicts and can neutralise potential risks in real time. This allows for dynamic mitigation responses, such as route scrubbing, which filters malicious traffic while letting legitimate data through, or blackholing, which drops all traffic to a targeted IP address to quickly isolate the threat.  

AI-enabled systems can distinguish between legitimate high-traffic events, such as major online sales or software updates, and actual threats. For example, during a global gaming launch, AI-driven monitoring can recognise a surge in legitimate player logins and downloads, preventing unnecessary blocking while still filtering out concurrent malicious traffic. Rather than relying solely on known signatures, AI learns from historical attacks to recognise patterns and spot unusual activity. This improves accuracy and reducing unnecessary downtime for end-users. Crucially, AI also offers the scalability required to secure complex global networks without adding operational overhead. Beyond technical resilience, AI-driven security also enhances customer trust, reduces operational costs, and supports compliance – making it a strategic investment as much as a defensive measure. 

One of the most promising advancements is in geo-path intelligence, understanding the journey of data through regulatory and geopolitical lenses. As data protection laws tighten and geopolitical uncertainty rises, wholesale providers must not only protect traffic but also assure customers that they have control over where and how their data flows. By integrating AI with geo-aware routing and IP intelligence, wholesale networks can dynamically isolate threats and steer traffic through trusted zones. In a world increasingly wary of data exposure, offering customers the ability to choose their data centre paths and defend them intelligently with AI is a powerful security value-add. 

Shared Intelligence for a Stronger Ecosystem 

Security in the wholesale domain also demands collaboration. The growing complexity of threats means no single entity can do it alone. Wholesale network providers must share threat intelligence, align on best practices, and participate in cross-industry initiatives. AI facilitates this by enabling the creation of distributed defence systems – digital immune networks that learn from and respond to threats collectively, rather than in silos. 

This evolution also reflects a shift in priority. Understanding local customer needs and applying a people-first approach is central to long-term success. Security must be able to understand intent as well as be intelligent. Providers are no longer just connectivity suppliers; they are trusted guardians of global digital infrastructure. Fortune business insights projects that global network security revenue will grow from $24.55 billion in 2024 to nearly $73 billion by 2032, highlighting the urgent demand for investment. The future of wholesale networking lies in real-time, AI-driven monitoring, enabling faster, smarter protection across complex, multi-tenant environments. 

In today’s threat landscape, passive security is no longer enough. Wholesale networks must evolve into intelligent, adaptive ecosystems where AI not only enables faster, smarter protection, but also strengthens compliance, efficiency, and customer trust. This shift transforms providers from reactive defenders into proactive guardians of global connectivity and critical infrastructure. Securing these networks demands investment in initiatives that combine predictive threat detection with precision response, ensuring wholesale networks can continue to operate as the invisible yet indispensable backbone of the digital economy. 

Author

Related Articles

Back to top button