An analysis of security incidents on the Internet 1989-1995

This research analyzed trends in Internet security through an investigation of 4,299 security- related incidents on the Internet reported to the CERT(R) Coordination Center (CERT(R)/CC) from 1989 to 1995. Prior to this research, our knowledge of security problems on the Internet was limited and primarily anecdotal. This information could not be effectively used to determine what government policies and programs should be, or to determine the effectiveness of current policies and programs. This research accomplished the following (1) development of a taxonomy for the classification of Internet attacks and incidents, (2) organization, classification, and analysis of incident records available at the CERT(R)/CC) and (3) development of recommendations to improve Internet security, and to gather and distribute information about Internet security.