CERT/CC Statistics 1988-2004
The CERT/CC publishes statistics for Vulnerabilities, Vulnerability notes, National Cyber Alert System documents, Security alerts, Mail messages handled, Hotline calls received, Incidents reported.
![]() |
Related Sites |
![]() | |


CERT/CC Statistics 1988-2004
The CERT/CC publishes statistics for
- Vulnerabilities reported
- Vulnerability notes published
- National Cyber Alert System documents published
- Security alerts published
- Mail messages handled
- Hotline calls received
- Incidents reported
Vulnerabilities reported
1995-1999
| Year | 1995 | 1996 | 1997 | 1998 | 1999 |
| Vulnerabilities | 171 | 345 | 311 | 262 | 417 |
2000-2004
| Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
| Vulnerabilities | 1,090 | 2,437 | 4,129 | 3,784 | 2,683 |
Total vulnerabilities reported (1995-3Q 2004): 15,629
1998-1999
Vulnerability notes published
| Year | 1998 | 1999 |
| Vulnerability Notes | 8 | 3 |
2000-2004
| Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
| Vulnerability Notes | 47 | 326 | 375 | 255 | 266 |
Total vulnerability notes published (1998-3Q 2004): 1,280
2004
(published on www.us-cert.gov)
National Cyber Alert System documents published
| Year | 1Q-3Q 2004 |
| Technical Cyber Security Alerts | 22 |
| Cyber Security Alerts | 14 |
| Cyber Security Tips | 18 |
| Cyber Security Bulletins | 21 |
| Totals | 75 |
Total National Cyber Alert System documents published (1Q-3Q 2004): 75
Note: Information previously published in CERT advisories, incident notes, and summaries is now incorporated into National Cyber Alert System documents.
1988-1989
| Year | 1988 | 1989 |
| Advisories | 1 | 7 |
| Totals | 1 | 7 |
1990-1999
| Year | 1990 | 1991 | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 |
| Advisories | 12 | 23 | 21 | 19 | 15 | 18 | 27 | 28 | 13 | 17 |
| Incident Notes |   |   |   |   |   |   |   |   | 7 | 8 |
| Vendor Bulletins |   |   |   |   | 2 | 10 | 20 | 16 | 13 |   |
| Summaries |   |   |   |   |   | 3 | 6 | 6 | 8 | 5 |
| Totals | 12 | 23 | 21 | 19 | 17 | 31 | 53 | 50 | 41 | 30 |
2000-2004
| Year | 2000 | 2001 | 2002 | 2003 | 1Q 2004 |
| Advisories | 22 | 37 | 37 | 28 | 2 |
| Incident Notes | 10 | 15 | 6 | 4 | 2 |
| Summaries | 4 | 4 | 4 | 4 |   |
| Totals | 36 | 56 | 47 | 36 | 4 |
Total security alerts published (1988-1Q 2004): 484
1988-1989
Mail messages handled
| Year | 1988 | 1989 |
| 539 | 2,869 |
1990-1999
| Year | 1990 | 1991 | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999* |
| 4,448 | 9,629 | 14,463 | 21,267 | 29,580 | 32,084 | 31,268 | 39,626 | 41,871 | 34,612 |
2000-2004
| Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
| 56,365 | 118,907 | 204,841 | 542,754 | 552,320 |
Total mail messages handled (1988-3Q 2004): 1,737,443
1992-1999
Hotline calls received
| Year | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 |
| Calls | 1,995 | 2,282 | 3,665 | 3,428 | 2,062 | 1,058 | 1,001 | 2,099 |
2000-2004
| Year | 2000 | 2001 | 2002 | 2003 | 1Q-3Q 2004 |
| Calls | 1,280+ | 1,417+ | 880+ | 934+ | 650+ |
Total hotline calls received (1992-3Q 2004): 23,479+
Note: Given the widespread use of automated attack
tools, attacks against Internet-connected systems have become so
commonplace that counts of the number of incidents reported provide
little information with regard to assessing the scope and impact of
attacks. Therefore, as of 2004, we will no longer publish the number
of incidents reported. Instead, we will be working with others in the
community to develop and report on more meaningful metrics, such as
the 2004 E-Crime Watch Survey. We
welcome ideas and proposals for other collaborations in this area.
Incidents reported
1988-1989
| Year | 1988 | 1989 |
| Incidents | 6 | 132 |
1990-1999
| Year | 1990 | 1991 | 1992 | 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 |
| Incidents | 252 | 406 | 773 | 1,334 | 2,340 | 2,412 | 2,573 | 2,134 | 3,734 | 9,859 |
2000-2003
| Year | 2000 | 2001 | 2002 | 2003 |
| Incidents | 21,756 | 52,658 | 82,094 | 137,529 |
Total incidents reported (1988-2003): 319,992

