Title

Date

Source

Pages

Notes

Real-Time Web Monitor (Global Attack Traffic) - Map

Continuously Updated

Akamai

N/A

Akamai monitors global Internet conditions around the clock. With this real-time data we identify the global regions with the greatest attack traffic, cities with the slowest web connections (latency), and geographic areas with the most web traffic (traffic density).

The Cyberfeed

Continuously Updated

Anubis Networks

N/A

Provides real-time threat intelligence data worldwide.

Digital Attack Map

Continuously Updated

Arbor Networks

N/A

The map is powered by data fed from 270+ ISP customers worldwide who have agreed to share network traffic and attack statistics. The map displays global activity levels in observed attack traffic, which is collected anonymously, and does not include any identifying information about the attackers or victims involved in any particular attack.

Real-Time Web Monitor

Continuously Updated

Akamai

N/A

Akamai monitors global Internet conditions around the clock. The map identifies the global regions with the greatest attack traffic.

Cyber Power Index

Continuously Updated

Booz Allen Hamilton and the Economist Intelligence Unit

N/A

The index of developing countries' ability to withstand cyberattacks and build strong digital economies, rates the countries on their legal and regulatory frameworks, economic and social issues, technology infrastructure, and industry. The index puts the United States in the no. 2 spot, and the United Kingdom in no. 1.

Web Hacking Incidents Database

Breach Security, Inc.

N/A

The web hacking incident database (WHID) is a project dedicated to maintaining a list of web application-related security incidents. The WHID's purpose is to serve as a tool for raising awareness of the web application security problem and provide information for statistical analysis of web application security incidents. Unlike other resources covering website security, which focus on the technical aspect of the incident, the WHID focuses on the impact of the attack. To be included in WHID an incident must be publicly reported, be associated with web application security vulnerabilities and have an identified outcome.

Significant Cyber Incidents Since 2006

Center for Strategic and International Studies (CSIS)

15

This timeline records significant cyber events since 2006. It focuses on successful attacks on government agencies, defense and high tech companies, or economic crimes with losses of more than $1 million.

Overview of CurrentCurrent Cyber Attacks
(logged by 180 Sensors)

Deutsche Telekom

N/A

Provides a real-time visualization and map of cyberattacks detected by a network of 180 sensors placed around the world.

N/A

Real-Time Web Monitor

Ongoing

Akamai

N/A

Akamai monitors global Internet conditions around the clock. The map identifies the global regions with the greatest attack trafficAs required by Section 13402(e)(4) of the HITECH Act, the Secretary must list breaches of unsecured protected health information affecting 500 or more individuals. These breaches are now posted in a new, more accessible format that allows users to search and sort the breaches. Additionally, this new format includes brief summaries of breach cases that OCR has investigated and closed, as well as the names of private practice providers who have reported breaches of unsecured protected health information to the Secretary.

HoneyMap

Continuously Updated

Honeynet Project

N/A

The HoneyMap displays malicious attacks as they happen. Each red dot on the map represents an attack on a computer. Yellow dots represent honeypots, or systems set up to record incoming attacks. The black box on the bottom gives the location of each attack. The Honeynet Project is an international 501c3 nonprofit security research organization, dedicated to investigating the latest attacks and developing open source security tools to improve Internet security.

Data Breaches

Continuously Updated

Identity Theft Resource Center (ITRC)

N/A

The ITRC breach list is a compilation of data breaches confirmed by various media sources and notification lists from state governmental agencies. This list is updated daily and published each Tuesday. To qualify, breaches must include personally identifiable information that could lead to identity theft, especially Social Security numbers. ITRC follows U.S. federal guidelines about what combination of personal information comprises a unique individual. The exposure of this information constitutes a data breach.

World's Biggest Data Breaches (visualization)

Continuously Updated

Information is Beautiful

N/A

Selected data losses greater than 30,000 records.

Cytherthreat: Real-Time Map

Continuously Updated

Kaspersky Labs

N/A

Kaspersky Labs has launched an interactive cyberthreat map that lets viewers see cybersecurity incidents as they occur around the world in real time. The interactive map includes malicious objects detected during on-access and on-demand scans, email and web antivirus detections, and objects identified by vulnerability and intrusion detection sub-systems.

McAfee Research & Reports (multiple)

Continuously Updated

McAfee

N/A

Regional Threat Assessment: Infection Rates and Threat Trends by Location Regional Threat Assessment: Infection Rates and Threat Trends by Location (Note: Select "All Regions" or a specific country or region to view threat assessment reports)

Microsoft Security Intelligence Report (SIR)

N/A

Data on infection rates, malicious websites, and threat trends by regional location, worldwide.

ThreatWatch

NextGov

N/A

ThreatWatch is a snapshot of the data breach intrusions against organizations and individuals, globally, on a daily basis. It is not an authoritative list, because many compromises are never reported or even discovered. The information is based on accounts published by outside news organizations and researchers.

N/A

Cyber Power Index

Ongoing

Booz Allen Hamilton and the Economist Intelligence Unit

N/A

The index of developing countries' ability to withstand cyberattacks and build strong digital economies, rates the countries on their legal and regulatory frameworks, economic and social issues, technology infrastructure, and industry. The index puts the United States in the no. 2 spot, and the United Kingdom in no. 1.

Data Breaches

Ongoing

Identity Theft Resource Center (ITRC)

N/A

The ITRC breach list is a compilation of data breaches confirmed by various media sources and notification lists from state governmental agencies. This list is updated daily and published each Tuesday. To qualify, breaches must include personally identifiable information that could lead to identity theft, especially Social Security numbers. ITRC follows U.S. federal guidelines about what combination of personal information comprises a unique individual. The exposure of this information constitutes a data breach.

Cytherthreat: Real-Time Map

Ongoing

Kaspersky Labs

N/A

Kaspersky Labs has launched an interactive cyberthreat map that lets viewers see cybersecurity incidents as they occur around the world in real time. The interactive map includes malicious objects detected during on-access and on-demand scans, email and web antivirus detections, and objects identified by vulnerability and intrusion detection sub-systems.

Global Botnet Map

Ongoing

Trend Micro

N/A

Trend Micro continuously monitors malicious network activities to identify command-and-control (C&C) servers and help increase protection against botnet attacks. The real-time map indicates the locations of C&C servers and victimized computers they control that have been discovered in the previous six hours.

HoneyMap

Ongoing

Honeynet Project

N/A

The HoneyMap displays malicious attacks as they happen. Each red dot on the map represents an attack on a computer. Yellow dots represent honeypots, or systems set up to record incoming attacks. The black box on the bottom gives the location of each attack. The Honeynet Project is an international 501c3 non-profit security research organization, dedicated to investigating the latest attacks and developing open source security tools to improve Internet security.

The Cyberfeed

Ongoing

Anubis Networks

N/A

Provides real-time threat intelligence data worldwide.

DataLossDB

Ongoing

Open Security Foundation

N/A

The Open Security Foundation's DataLossDB gathers information about events involving the loss, theft, or exposure of personally identifiable information (PII). DataLossDB's dataset, in current and previous forms, has been used in research by numerous educational, governmental, and commercial entities, which often have been able to provide statistical analysis with graphical presentations.

Breaches Affecting 500 or More Individuals

Ongoing

U.S. Department of Health and Human Services

N/A

As required by Section 13402(e)(4) of the HITECH Act, the Secretary must list breaches of unsecured protected health information affecting 500 or more individuals. These breaches are now posted in a new, more accessible format that allows users to search and sort the breaches. Additionally, this new format includes brief summaries of breach cases that OCR has investigated and closed, as well as the names of private practice providers who have reported breaches of unsecured protected health information to the Secretary.

E-mail AccountThe Open Security Foundation's DataLossDB gathers information about events involving the loss, theft, or exposure of personally identifiable information (PII). DataLossDB's dataset, in current and previous forms, has been used in research by numerous educational, governmental, and commercial entities, which often have been able to provide statistical analysis with graphical presentations.

Chronology of Data Breaches, Security Breaches 2005 to the Present

Continuously Updated

Privacy Rights Clearinghouse

N/A

The (U.S.-only) data breaches have been reported because the personal information compromised includes data elements useful to identity thieves, such as Social Security numbers, account numbers, and driver's license number. The list is not a comprehensive compilation of all breach data. Reported incidents affecting more than nine individuals from an identifiable entity are included.

Global Botnet Map

Continuously Updated

Trend Micro

N/A

Trend Micro continuously monitors malicious network activities to identify command-and-control (C&C) servers and help increase protection against botnet attacks. The real-time map indicates the locations of C&C servers and victimized computers they control that have been discovered in the previous six hours.

2016 Internet Security Threat Report | Government

April 8, 2016

Symantec

98

Public-sector data breaches exposed some 28 million identities in 2015, but hackers were responsible for only one-third of those compromises, according to new research. Negligence was behind nearly two-thirds of the exposed identities through government agencies. In total, the report suggests 21 million identities were compromised accidentally, compared with 6 million by hackers.

2016 Data Breach Investigations Report (annual)

April 2016

Verizon

85

This report covers 100,000+ incidents, including 2,260 analyzed breaches across 82 countries. "In 93% of cases, it took attackers minutes or less to compromise systems. Organizations, meanwhile, took weeks or more to discover that a breach had even occurred — and it was typically customers or law enforcement that sounded the alarm, not their own security measures."

Data Breach Digest: Scenarios from the Field

March 3, 2016

Verizon

84

The report is a set of 18 case studies chosen to represent the most common and destructive types of incidents seen over the past eight years. For each incident, the report reveals the events leading up to the breach, details of the investigation and the how Verizon helped the organization recover. The incidents include a water utility at which intruders managed to manipulate water treatment processes and flow; a developer who outsourced his work to China; and pirates (the seafaring variety) who used information stolen from a shipping company's computers to target specific containers on vessels they boarded.

Emerging Cyber Threats Report 2016

November 2015

Georgia Institute of Technology Cybersecurity Summit 2015

20

Nearly two dozen cybersecutity experts from Georgia Tech, business, government and defense, share their observations about emerging trends in a more connected world—where cyberattacks grow more persistent and sophisticated by the day. Key findings included the privacy tug-of-war between individuals and organizations has become a tug with no war; exponential growth in the Internet of Things over the past two years creates a larger cyberattack surface; the digital economy is growing more complex while a lack of highly trained security workers persists worldwide; and cyber espionage shows no sign of abating.

2015 Global Report on the Cost of Cybercrime

October 8, 2015

HP Enterprise Security and Ponemon

30

The study found that a benchmark sample of U.S. organizations experienced an average cost of cybercrime of $15 million. The study shows that since 2009, the average cost of cybercrime per organization per year increased by 82%. This year the range was anywhere between $1.9 million and $65 million each year per company. While annualized cost increases as organizational size increases, small organizations incur more than double the per-capita cost than large organization, experiencing $1,571 in costs per seat compared with a larger organization's $667 per seat.

Follow the Data: Dissecting Data Breaches and Debunking Myths

September 22, 2015

Trend Micro

N/A

Trend Micro's Forward-Looking Threat Research (FTR) Team has taken 10 years of information on data breaches in the United States from the Privacy Rights Clearinghouse (PRC) (from 2005 through 2015) and subjected it to detailed analysis to better understand the real story behind data breaches and their trends. The study identifies a number of deeper trends such as(1) hacking or malware attacks account for the single greatest cause of data loss with portable device loss at a close second, (2)PII is the data most likely stolen with financial data second, and (3) credentials are not the most commonly stolen data, but the most likely data to lead to additional types of data loss.

August 27, 2015

FBI Internet Crime Complaint Center (IC3)

N/A

The FBI warned about a significant spike in victims and dollar losses stemming from an increasingly common scam in which crooks spoof communications from executives at the victim firm in a bid to initiate unauthorized international wire transfers. According to the FBI, thieves stole nearly $750 million in such scams from more than 7,000 victim companies in the United States between October 2013 and August 2015.

Criminals Continue to Defraud and Extort Funds from Victims Using CryptoWall Ransomware Schemes

June 23, 2015

FBI Internet Crime Complaint Center (IC3)

N/A

Between April 2014 and June 2015, the CryptoWall ransomware cost Americans more than $18 million. The money was spent not only on ransoms, which range from $200 to $10,000 apiece, but also on "network mitigation, network countermeasures, loss of productivity, legal fees, IT services, or the purchase of credit monitoring services for employees or customers."

2015 Cost of Data Breach: Global Analysis

May 27, 2015

Ponemon Institute/IBM

31

According to the study of 350 companies spanning 11 countries, the average consolidated total cost of a data breach is $3.8 million, representing a 23% increase since 2013.The study also found that the average cost incurred for each lost or stolen record containing sensitive and confidential information increased 6% from a consolidated average of $145 to $154. Health care emerged as the industry with the highest cost per stolen record with the average cost for organizations reaching as high as $363. Additionally, retailers have seen their average cost per stolen record jump dramatically from $105 last year to $165 in this year's study.

2015 Data Breach Investigations Report (DBIR)

April 14, 2015

Verizon

70

A full three-quarters of attacks spread from the first victim to the second in 24 hours or less, and more than 40% spread from the first victim to the second in under an hour. On top of the speed with which attackers compromise multiple victims, the useful lifespan of shared information can sometimes be measured in hours. Researchers also found that of the IP addresses observed in current information sharing feeds, only 2.7% were valid for more than a day, and the number dwindles from there. Data show that information sharing has to be good to be effective.

HIPAA breaches: The list keeps growing

March 12, 2015

Healthcare IT News

N/A

More than 41 million people have had their protected health information compromised in Health Insurance Portability and Accountability Act (HIPAA) privacy and security breaches. Using data from the Department of Health and Human Services, which includes HIPAA breaches involving more than 500 individuals, reported by 1,149 covered entities and business associates, the website compiled a sortable, searchable list.

Federal Information Management Security Act (Annual Report to Congress)

February 27, 2015

Office of Management and Budget (OMB)

100

The number of actual cybersecurity incidents reported by federal agencies to the DHS decreased last year. Data show the total bulk number of incident reports sent by the largest 24 agencies to US-CERT going up by about 16% during FY2014 from the year before. But when two significant categories from that data set are removed— "non-cybersecurity incidents" and "other"— the number actually shows a decrease of about 6%. Non-cybersecurity incidents involve the mishandling of personality identifiable information, but without a cybersecurity component, meaning the data breach likely occurred through a misplaced paper document. Incidents classified as "other" are things such as scans, blocked attempts at access and miscellaneous events. Reported incidents of actual serious cybersecurity issues, such as malware, suspicious network activity and improper usage, declined last year. Real threats that did increase in recorded number include social engineering, unauthorized access, and denial-of-service attacks.

2014 Global Threat Intel Report

February 6, 2015

CrowdStrike

77

This report summarizes CrowdStrike's year-long daily scrutiny of more than 50 groups of cyber threat actors, including 29 different state-sponsored and nationalist adversaries. Key findings explain how financial malware changed the threat landscape and point of sale malware became increasingly prevalent. The report also profiles a number of new and sophisticated adversaries from China and Russia, including Hurricane Panda, Fancy Bear, and Berserk Bear.

Incident Response/Vulnerability Coordination in 2014

February 2015

ICS/CERT Monitor

15

In FY2014, the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) received and responded to 245 incidents reported by asset owners and industry partners. The Energy sector led all others again in 2014 with the most reported incidents. ICS-CERT's continuing partnership with the Energy sector provides many opportunities to share information and collaborate on incident response efforts. Also noteworthy in 2014 were the incidents reported by the Critical Manufacturing sector, some of which were from control systems equipment manufacturers.

CISCO 2015 Annual Security Report

(free registration required)

January 20, 2015

Cisco

53

Government agencies worldwide, compared with banks and many other companies, are better able to cope when the inevitable data breach occurs, according to the study on advances in cybersecurity. About 43% of the public sector falls into the "highly sophisticated" security posture segment. The best security stances can be found within the telecommunications and energy sectors, tied at 47%.

The Cost of Malware Containment

January 20, 2015

Ponemon Institute

According to the study, organizations typically received nearly 17,000 malware alerts weekly, which pose a taxing and costly endeavor. Of those alerts, only 3,218 were considered to be actionable and only 705 (or 4%) were investigated. An average of 395 hours is wasted weekly investigating and containing malware due to false positives or false negatives, costing participating organizations an estimated $1.27 million yearly in average value of lost time.

2014 Global Report on the Cost of Cybercrime

October 8, 2014

HP Enterprise Security and Ponemon Institute

31

The 2014 global study of U.S.-based companies, spanning seven nations, found that over the course of a year, the average cost of cybercrime for companies in the United States climbed by more than 9% to $12.7 million up from $11.6 million in the 2013 study. The average time to resolve a cyberattack is also rising, climbing to 45 days from 32 days in 2013.

Managing Cyber Risks in an Interconnected World: Key Findings from the Global State of Information Security Survey 2015

September 30, 2014

Pricewaterhouse Coopers (PwC)

31

The Global State of Information Security Survey (GSISS), on which the report is based, surveyed more than 9,700 respondents worldwide and detected that the number of cyber incidents increased at a compound annual rate of 66% since 2009. As the frequency of cyber incidents have risen so too has the reported costs of managing and mitigating them. Globally, the estimated average financial loss from cyber incidents was $2.7 million, a 34% increase over 2013. Big losses have also been more common, with the proportion of organizations reporting financial hits in excess of $20 million, nearly doubling. Despite greater awareness of cybersecurity incidents, the study found that global information security budgets actually decreased 4% compared with 2013.

How Consumers Foot the Bill for Data Breaches (infographic)

August 7, 2014

NextGov.com

N/A

In 2013, there were more than 600 data breaches, with an average organization cost of more than $5 million. But in the end, it is the customers who are picking up the tab, from higher retail costs to credit card reissue fees.

Is Ransomware Poised for Growth?

July 14, 2014

Symantec

N/A

Ransomware usually masquerades as a virtual "wheel clamp" for the victim's computer. For example, pretending to be from the local law enforcement, it might suggest the victim had been using the computer for illicit purposes and to unlock it the victim would have to pay a fine—often between $100 and $500. Ransomware escalated in 2013, with a 500% (six-fold) increase in attack numbers between the start and end of the year.

Critical Infrastructure: Security Preparedness and Maturity

July 2014

Unisys and Ponemon Institute

34

Unisys and Ponemon Institute surveyed nearly 600 IT security executives of utility, energy, and manufacturing organizations. Overall, the report finds organizations are simply not prepared to deal with advanced cyber threats. Only half of companies have actually deployed IT security programs and, according to the survey, the top threat actually stems from negligent insiders.

The Value of a Hacked Email Account

June 13, 2014

Krebs on Security

N/A

From the blog, "One prominent credential seller in the underground peddles iTunes accounts for $8, and Fedex.com, Continental.com, and United.com accounts for USD $6. Groupon.com accounts fetch $5, while $4 buys hacked credentials at registrar and hosting provider Godaddy.com, as well as wireless providers ATT.com, Sprint.com, Verizonwireless.com, and Tmobile.com. Active accounts at Facebook and Twitter retail for just $2.50 apiece... [S]ome crime shops go even lower with their prices for hacked accounts, charging between $1 and $3 for active accounts at dell.com, overstock.com, walmart.com, tesco.com, bestbuy.com and target.com, etc."

Online Trust Honor Roll 2014

June 11, 2014

Online Trust Alliance

N/A

Out of nearly 800 top consumer websites evaluated, 30.2% made the Honor Roll, which distinguishes them in best practices for safeguarding data in three categories: domain/brand protection, privacy, and security. Conversely, nearly 70% did not qualify for the Honor Roll, with 52.7% failing in at least one of the three categories.

Net Losses: Estimating the Global Cost of Cybercrime

June 2014

CSIS and McAfee

24

This report explores the economic impact of cybercrime, including estimation, regional variances, IP theft, opportunity and recovery costs, and the future of cybercrime. Cybercrime costs the global economy up to $575 billion annually, with the United States taking a $100 billion hit, the largest of any country. That total is up to 0.8% of the global economy. For the United States, the estimated $100 million cost means 200,000 lost jobs, and is almost half of the total loss for the G-8 group of Western countries.

2014 U.S. State of Cybercrime Survey

May 29, 2014

PwC, CSO Magazine, the U.S. Computer Emergency Readiness Team (CERT) Division of the Software Engineering Institute at Carnegie Mellon University, and the U.S. Secret Service

21

The cybersecurity programs of U.S. organizations do not rival the persistence, tactical skills, and technological prowess of their potential cyber adversaries. In 2013, three in four (77%) respondents to the survey detected a security event in the past 12 months, and more than a third (34%) said the number of security incidents detected increased over the previous year.

The Target Breach, by the Numbers

May 6, 2014

Krebs on Security

N/A

A synthesis of numbers associated with the Target data breach of December 19, 2013 (e.g., number of records stolen, estimated dollar cost to credit unions and community banks, amount of money Target estimates it will spend upgrading payment terminals to support Chip-and-PIN enabled cards).

Website Security Statistics Report

April 15, 2014

WhiteHat Security

22

WhiteHat researchers examined the vulnerability assessment results of the more than 30,000 websites under WhiteHat Security management to measure how the underlying programming languages and frameworks perform in the field. The report yields findings to specific languages that are most prone to specific classes of attacks, for how often and how long, as well as a determination as to whether popular modern languages and frameworks yield similar results in production websites. The popularity and complexity of .Net, Java, and ASP mean that the potential attack surface for each language is larger; as such, 31% of vulnerabilities were observed in .Net, 28% were found in Java, and 15% were found in ASP.

More online Americans say they've experienced a personal data breach

April 14, 2014

Pew Research Center

N/A

Findings from a January 2014 survey show that 18% of online adults have had important personal information—such as Social Security numbers, credit cards, or bank accounts—stolen. That is an increase from the 11% of online adults who reported personal information theft in July 2013 and 21% who said they had an email or social networking account compromised or taken over without their permission. The same number reported this experience in a July 2013 survey.

2014 Internet Security Threat Report

April 8, 2014

Symantec

98

In 2013, there were 253 data breaches that exposed more than 552 million sets of personal data, according to the annual report. The number of data breaches was up 62% from the previous year and nearly 50 more than in 2011, previously dubbed by Symantec "year of the breach." In addition, eight mega-breaches exposed more than 10 million identities each, an eightfold increase from one the year before and nearly double the five in 2011.

Advanced Threat Report 2013

February 27, 2014

FireEye

22

The report analyzes more than 40,000 advanced attacks across the globe to map out the latest trends in advanced persistent threat (APT) attacks. The United States topped the list of countries targeted by APT activity, which FireEye defines as online attacks that were "likely directly or indirectly supported by a nation state." American institutions were also targeted by many more APT malware families (collections of malware that share significant amounts of code with each other) than anywhere else.

Cisco 2014 Annual Security Report

January 16, 2014

Cisco

81

The report offers data on and insights into top security concerns, such as shifts in malware, trends in vulnerabilities, and the resurgence of distributed denial-of-service (DDoS) attacks. The report also looks at campaigns that target specific organizations, groups, and industries, and the growing sophistication of those who attempt to steal sensitive information. The report concludes with recommendations for examining security models holistically and gaining visibility across the entire attack continuum—before, during, and after an attack. (Free registration required.)

McAfee Labs 2014 Threats Predictions

January 7, 2014

McAfee

6

In 2013, the rate of growth in the appearance of new mobile malware, which almost exclusively targets the Android platform, was far greater than the growth rate of new malware targeting PCs. In the last two quarters reported, new PC malware growth was nearly flat, while appearances of new Android samples grew by 33%.

ENISA Threat Landscape 2013 – Overview of Current and Emerging Cyber-Threats

December 11, 2013

European Union Agency for Network and Information Security

70

The report is a collection of top cyber threats that have been assessed in the reporting period (i.e., within 2013). ENISA has collected over 250 reports regarding cyber threats, risks, and threat agents. ETL 2013 is a comprehensive compilation of the top 15 cyber threats assessed.

Emerging Cyber Threats Report 2014

November 14, 2013

Georgia Institute of Technology

16

The report highlights cloud security and security issues involving the 'Internet of Things,' referring to the notion that the increase of Internet-capable devices could create opportunities for remote hacking and data leakage. With everything from home automation to smartphones and other personal devices becoming connected to the Internet, these devices will capture more real-world information and could permit outside parties, companies, and governments to misuse that information. (From the annual Georgia Tech Cyber Security Summit 2013.)

2013/2014 Global Fraud Report

October 23, 2013

Kroll/Economist Intelligence Unit

N/A

The Annual Global Fraud Survey, commissioned by Kroll and carried out by the Economist Intelligence Unit, polled 901 senior executives worldwide from a broad range of industries and functions in July and August 2013. The number of companies suffering external cyberattacks designed to steal commercial secrets doubled in 2012-2013 compared with the previous financial year.

Illicit Cyber Activity Involving Fraud

August 8, 2013

Carnegie Mellon University Software Engineering Institute

28

Technical and behavioral patterns were extracted from 80 fraud cases—67 insider and 13 external—that occurred between 2005 and 2013. These cases were used to develop insights and risk indicators to help private industry, government, and law enforcement more effectively prevent, deter, detect, investigate, and manage malicious insider activity within the banking and finance sector.

FY2012 Report to Congress on the Implementation of the Federal Information Security Management Act of 2002 (FISMA)

March 7, 2013

White House/OMB

63

More government programs violated data security law standards in 2012 than in the previous year, and at the same time, computer security costs have increased by more than $1 billion. Inadequate training was a large part of the reason all-around FISMA adherence scores slipped from 75% in 2011 to 74% in 2012. Agencies reported that about 88% of personnel with system access privileges received annual security awareness instruction, down from 99% in 2011. Meanwhile, personnel expenses accounted for the vast majority—90%—of the $14.6 billion departments spent on information technology security in 2012.

Linking Cybersecurity Policy and Performance: Microsoft Releases Special Edition Security Intelligence Report

February 6, 2013

Microsoft Trustworthy Computing

27

Introduces a new methodology for examining how socioeconomic factors in a country or region impact cybersecurity performance, examining measures such as use of modern technology, mature processes, user education, law enforcement and public policies related to cyberspace. This methodology can build a model that will help predict the expected cybersecurity performance of a given country or region.

Improving the Evidence Base for Information Security and Privacy Policies: Understanding the Opportunities and Challenges related to Measuring Information Security, Privacy and the Protection of Children Online

December 20, 2012

Organisation for Economic Cooperation and Development (OECD)

94

This report provides an overview of existing data and statistics in fields of information security, privacy, and the protection of children online. It highlights the potential for the development of better indicators in these respective fields showing in particular that there is an underexploited wealth of empirical data that, if mined and made comparable, will enrich the current evidence base for policymaking.

McAfee Explains The Dubious Math Behind Its 'Unscientific' $1 Trillion Data Loss Claim

August 3, 2012

Forbes.com

N/A

In August 2012, NSA director Keith Alexander quoted a statistic from antivirus firm McAfee that the cost of worldwide cybercrime amounted to $1 trillion a year. "No, the statistic was not simply made up. Yes, it's just a 'ballpark figure' and an 'unscientific' one, the company admits. But despite Pro Publica's criticisms and its own rather fuzzy math, the company stands by its trillion-dollar conclusion as a (very) rough estimate."

Does Cybercrime Really Cost $1 Trillion?

August 1, 2012

ProPublica

N/A

In a news release from computer security firm McAfee announcing its 2009 report, "Unsecured Economies: Protecting Vital Information," the company estimated a trillion dollar global cost for cybercrime. That number does not appear in the report itself. McAfee's trillion-dollar estimate is questioned by the three independent researchers from Purdue University whom McAfee credits with analyzing the raw data from which the estimate was derived. An examination of their origins by ProPublica has found new grounds to question the data and methods used to generate these numbers, which McAfee and Symantec say they stand behind.

Measuring the Cost of Cybercrime

June 25, 2012

11^th Annual Workshop on the Economics of Information Security

N/A

This report states that in total, cyber-crooks' earnings might amount to a couple of dollars per citizen per year. But the indirect costs and defense costs are very substantial (at least 10 times that). The authors conclude that "on the basis of the comparative figures collected in this study, we should perhaps spend less in anticipation of computer crime (on antivirus, firewalls etc.) but we should certainly spend an awful lot more on catching and punishing the perpetrators."

Revealed: Operation Shady RAT: an Investigation of Targeted Intrusions into 70+ Global Companies, Governments, and Non-Profit Organizations During the Last 5 Years

August 2, 2011

McAfee Research Labs

14

A comprehensive analysis of victim profiles from a five-year targeted operation that penetrated 72 government and other organizations, most of them in the United States, and copied everything from military secrets to industrial designs.

A Good Decade for Cybercrime: McAfee's Look Back at Ten Years of Cybercrime

December 29, 2010

McAfee

11

A review of the most publicized, pervasive, and costly cybercrime exploits from 2000 to 2010.

Title

Source

Date

Pages

Notes

Hacker Lexicon

Wired.com

Ongoing

N/A

Hacker Lexicon is WIRED's explainer series that seeks to de-mystify the jargon of information security, surveillance, and privacy.

Global Cyber Definitions Database

Organization for Security and Co-operation in Europe (OSCE)

November 2014

N/A

A compilation of definitions of cybersecurity (or information security) terms. The website also includes a submission form to share new or additional definitions.

Compilation of Existing Cybersecurity and Information Security Related Definitions

New America

October 2014

126

"Broadly, the documents analyzed for this report fall into one of five categories: national strategies and documents by governments, documents from regional and global intergovernmental organizations, including member state submissions to the United Nations General Assembly (UNGA), and international private and intergovernmental standards bodies as well as dictionaries."

Glossary of Key Information Security Terms, Revision 2

National Institute of Standards and Technology (NIST)

May 2013

222

Besides providing some 1,500 definitions, the glossary offers a source for each term from either a NIST or Committee for National Security Systems (CNSS) publication. The committee is a forum of government agencies that issues guidance aimed at protecting national security systems.

NIST Cloud Computing Reference Architecture

NIST

September 2011

35

Provides guidance to specific communities of practitioners and researchers.

Glossary of Key Information Security Terms

NIST

May 31, 2013

211

The glossary provides a central resource of terms and definitions most commonly used in NIST information security publications and in CNSS information assurance publications.

CIS Consensus Security Metrics

Center for Internet Security

November 1, 2010

175

Provides recommended technical control rules/values for hardening operating systems, middleware and software applications, and network devices. The recommendations are defined via consensus among hundreds of security professionals worldwide. (Free registration required.)

Joint Terminology for Cyberspace Operations

Chairman of the Joint Chiefs of Staff

November 1, 2010

16

This lexicon is the starting point for normalizing terms in all DOD cyber-related documents, instructions, CONOPS, and publications as they come up for review.

Department of Defense Dictionary of Military and Associated Terms

Chairman of the Joint Chiefs of Staff

November 8, 2010 (as amended through September 15, 2013)

547

Provides joint policy and guidance for Information Assurance (IA) and Computer Network Operations (CNO) activities.

DHS Risk Lexicon

Department of Homeland Security (DHS) Risk Steering Committee

September 2010

72

The lexicon promulgates a common language, consistency and clear understanding with regard to the usage of terms by the risk community across the DHS.