CERT/CC Statistics 1988-2004
The CERT/CC publishes statistics for Vulnerabilities, Vulnerability notes, National Cyber Alert System documents, Security alerts, Mail messages handled, Hotline calls received, Incidents reported.
Related Sites | |
CERT/CC Statistics 1988-2004
The CERT/CC publishes statistics for
- Vulnerabilities reported
- Vulnerability notes published
- National Cyber Alert System documents published
- Security alerts published
- Mail messages handled
- Hotline calls received
- Incidents reported
Vulnerabilities reported
1995-1999
Year | 1995 | 1996 | 1997 | 1998 | 1999 |
Vulnerabilities | 171 | 345 | 311 | 262 | 417 |
2000-2004
Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
Vulnerabilities | 1,090 | 2,437 | 4,129 | 3,784 | 2,683 |
Total vulnerabilities reported (1995-3Q 2004): 15,629
1998-1999
Vulnerability notes published
Year | 1998 | 1999 |
Vulnerability Notes | 8 | 3 |
2000-2004
Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
Vulnerability Notes | 47 | 326 | 375 | 255 | 266 |
Total vulnerability notes published (1998-3Q 2004): 1,280
2004
(published on www.us-cert.gov)
National Cyber Alert System documents published
Year | 1Q-3Q 2004 |
Technical Cyber Security Alerts | 22 |
Cyber Security Alerts | 14 |
Cyber Security Tips | 18 |
Cyber Security Bulletins | 21 |
Totals | 75 |
Total National Cyber Alert System documents published (1Q-3Q 2004): 75
Note: Information previously published in CERT advisories, incident notes, and summaries is now incorporated into National Cyber Alert System documents.
1988-1989
Year | 1988 | 1989 |
Advisories | 1 | 7 |
Totals | 1 | 7 |
1990-1999
Year | 1990 | 1991 | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 |
Advisories | 12 | 23 | 21 | 19 | 15 | 18 | 27 | 28 | 13 | 17 |
Incident Notes |   |   |   |   |   |   |   |   | 7 | 8 |
Vendor Bulletins |   |   |   |   | 2 | 10 | 20 | 16 | 13 |   |
Summaries |   |   |   |   |   | 3 | 6 | 6 | 8 | 5 |
Totals | 12 | 23 | 21 | 19 | 17 | 31 | 53 | 50 | 41 | 30 |
2000-2004
Year | 2000 | 2001 | 2002 | 2003 | 1Q 2004 |
Advisories | 22 | 37 | 37 | 28 | 2 |
Incident Notes | 10 | 15 | 6 | 4 | 2 |
Summaries | 4 | 4 | 4 | 4 |   |
Totals | 36 | 56 | 47 | 36 | 4 |
Total security alerts published (1988-1Q 2004): 484
1988-1989
Mail messages handled
Year | 1988 | 1989 |
539 | 2,869 |
1990-1999
Year | 1990 | 1991 | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999* |
4,448 | 9,629 | 14,463 | 21,267 | 29,580 | 32,084 | 31,268 | 39,626 | 41,871 | 34,612 |
2000-2004
Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
56,365 | 118,907 | 204,841 | 542,754 | 552,320 |
Total mail messages handled (1988-3Q 2004): 1,737,443
1992-1999
Hotline calls received
Year | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 |
Calls | 1,995 | 2,282 | 3,665 | 3,428 | 2,062 | 1,058 | 1,001 | 2,099 |
2000-2004
Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
Calls | 1,280+ | 1,417+ | 880+ | 934+ | 650+ |
Total hotline calls received (1992-3Q 2004): 23,479+
Note: Given the widespread use of automated attack
tools, attacks against Internet-connected systems have become so
commonplace that counts of the number of incidents reported provide
little information with regard to assessing the scope and impact of
attacks. Therefore, as of 2004, we will no longer publish the number
of incidents reported. Instead, we will be working with others in the
community to develop and report on more meaningful metrics, such as
the 2004 E-Crime Watch Survey. We
welcome ideas and proposals for other collaborations in this area.
Incidents reported
1988-1989
Year | 1988 | 1989 |
Incidents | 6 | 132 |
1990-1999
Year | 1990 | 1991 | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 |
Incidents | 252 | 406 | 773 | 1,334 | 2,340 | 2,412 | 2,573 | 2,134 | 3,734 | 9,859 |
2000-2003
Year | 2000 | 2001 | 2002 | 2003 |
Incidents | 21,756 | 52,658 | 82,094 | 137,529 |
Total incidents reported (1988-2003): 319,992