下面是小编为大家整理的2020年数据泄露调查报告,供大家参考。
DB I R
Ch ea t
sh ee t
4
I n t r o duc t ion
6
S umm a r y
o f
f i n d i n gs
7 A c to r s
10
A cco mmoda t i o n
an d
F oo d
S e r v i ce s
( NA I C S
7 2 )
44
Ar t s ,
E n t e r t a i nm e n t
and
Recr ea t i o n
( NA I C S
7 1)
4 6
C on s t r uc t ion
( NA I C S
2 3 )
48
E duca t ion al
S er v ic e s
( NA I C S
6 1 )
50
F i n a n c i a l
a n d
I n s u ra n c e
( NA I C S
5 2 )
5 2
H ea l t h c a r e
( NA I C S
6 2 )
54
N or t hern
A m eric a
( NA )
86
E u r o pe ,
M i dd l e
E a s t
a n d
A f r i c a
( EME A )
90
A s i a - Pa c if i c
( APA C )
9 3
L a t i n
A m e r i c a
a n d
t h e
C a r i bbea n
( LA C )
97
E r ro r
14
M a l wa re
1 5
R a nso m wa r e
16
H a c ki ng
19
S o c ia l
2 4
A ss et s
26
At t r i b u te s
29
H o w
m a n y
pa t h s
mu s t
a
b r ea c h
wa l k
d o w n ?
31
Tim e l in e
34
I nc i den t
cl a ss i f ic a t ion
pa tt e r ns
a n d
s ub se t s
35
M i n i n g ,
Q u a rr y i n g ,
a n d
O il
&
G a s
E x t ra c t i o n
+
U t ili t i e s
( NA I C S
2 1
+
22 )
62
O t h e r
S e r v i c e s
( NA I C S
8 1)
64
P r o f e ss ion al ,
S c ien t i f ic
a n d
T e c hnic al
S er v ic e s
( NA I C S
54 )
66
P u b li c
A d m i n i s t ra t i o n
( NA I C S
9 2 )
69
Re a l
E s t a t e
and
Re n t a l
and
L ea s i n g
( NA I C S
53 )
71
R e t a il
( NA I C S
44 – 4 5)
73
T r a n s p or t a t ion
a n d
W a r ehou s i ng ( NA I C S
48 – 4 9 )
76
Y ea r
i n
r e v i ew
10 4
A ppend i x A :
M e t ho dol o g y
10 8
A ppe n d i x B :
V E R I S
C o mm o n
A tt a c k
F ra m ew o r k
( V C A F )
11 2
A ppend i x C :
F ol l o w i ng t he
m oney —
t h e
k ey
t o n abb i n g
t h e
c ybe r c r i m i n a l
11 4
A ppe n d i x D :
S t a t e
o f
I da h o e nh a n c e s
i n c i de n t
r e s p o n s e
p r o g ra m
w i t h
V E R I S .
11 6
A ppend i x E:
C on t r i b u t i ng or g a ni za t ion s
11 8
A c t ion s
12
I nf o r m a t i o n
( NA I C S
5 1)
5 7 T hr ea t
a c t ion
v a rie t ie s
13
M a nu f a c t u r i n g
( NA I C S
3 1 – 33 )
5 9
C I S
C on t rol
r e c om m enda t ion s
1 01
2020
D a ta
B r e a c h
I n v e s t i g a t i o ns R epo r t
V a ri e t y :
M o r e
s pe c i fi c
e num e r a t i o n s
of h i gh e r - l e v el
c a t ego r i es ,
e . g .,
c l a ss i f y in g t h e
e x t e r n a l
“ bad
g u y ”
a s
a n o r ga n i z ed c r i m i n a l
g r o u p
o r
r e c o r d i n g
a
h a c k i n g a c t i o n a s
S Q L
i n j e c t i o n o r
b r ut e
fo r c e .
We
a l i g n w i t h t h e
N o rt h A m e r i c a n I n d u s try
C l a ss i fi c a t i o n S y s t e m ( N A I C S ) s tan d ar d
t o
ca t egor i z e
the
v i c t i m o r ga n i z a t i o n s
i n o u r
c o r p u s .
T h e
T h e
t e r m s
“ t h r ea t
a c t i o n s , ”
“ t h r ea t a c t o r s ”
a n d
“ v a r i e t i e s ”
w i ll
be r efe r e n c ed
a
l o t .
T h e s e
a r e
pa rt
of
t h e V o cab u l ary
for
E v e n t
Re c ord i n g
an d I ncide n t
S h ar i n g
( V E R I S ) ,
a
f r am e w ork de s i g n ed
t o
a ll o w
fo r
a
c o n s i s t e n t , un eq u iv oc al
co ll ec t i o n of
s ecu r i ty i ncide n t
de t a i l s .
H e r e
i s
how
they s h o u l d
be
i n te r p r eted :
T hr ea t
a ct o r:
W h o
i s
be h i n d
t h e
e v e n t ? T h i s
c o u l d
be
t h e
e x t e r n a l
“ bad
g u y ” t h a t
l a un c h es
a
p h ish in g
c a m pa i gn
o r
a n e m p l o y ee
w h o
l ea v e s
s e n s i t i v e docu me n t s
i n t h e i r
s ea t - ba ck
p ock e t .
T hr e a t
a c t i o n :
W h a t
t a c t i c s
( a c t i o n s ) w e r e
u s ed
t o
a ff e c t
a n a ss e t ?
V E R I S u s e s
s e v e n p r i m a ry
c a t ego r i e s
of t h r ea t
a c t i o n s :
M a l w a r e ,
H a c k i n g , S o c i a l ,
M i s u s e ,
P h y s i c a l ,
E rr o r
a n d E n v i r o nm e n t a l .
E x a m p l e s
a t
a
h i g h l e v e l a r e
h a c k i n g
a
s e r v e r ,
i n s t a ll i n g
m a l w a r e an d
i n f l ue nci n g
hum an
be h a v i or t h r o u g h a
s o c i a l
a tt a c k .
•
g i thu b. c o m / v z - r i s k / db i r / tr ee / g h - p ag e s / 2 0 2 0
i n c l u de s
D B I R
fa c t s , fi g u r e s
a n d
fi g u r e
da t a .
•
v er i s c omm un i t y . ne t
fea tu r e s i n for m a t i on
on
the
f r am e w ork
wi t h e x a m p l es
a n d
e num e r a t i o n l is t in g s .
•
g i thu b . c o m /v z - r i s k /ve r i s
fea tu r e s t h e
fu ll
V E R I S
s c h e m a .
•
g i thu b . c o m /v z - r i s k /vc db
p r o v ide s a cc e ss
t o
o u r
da t aba s e
o n p u b l i c l y d i s c l o s ed
b r ea c h e s ,
t h e
V E R I S C om mun i ty
Da t aba s e .
•
htt p : // v er i s c omm un i t y . ne t / v er i s _ w eb a pp _ m in . ht m l
a ll o w s
y o u t o
r e c ord
y o u r
o wn
i ncide n t s
an d b r ea c h e s .
Do n ’ t
f r e t ,
i t
s a v e s
a n y da t a
l o c a ll y
a n d
y o u o n l y
s h a r e
w h a t y o u wa n t .
We
t a l k
a
l o t
abo ut i n c i de n t s
a n d b r ea c h e s
a n d
w e
u s e
t h e
fo ll o w i n g def i niti o n s :
I nc i den t :
A
s e c u r i ty
e v e n t
t h a t c o m p r o m ises
t h e
in t e gr i ty , c o n fi de n t i a l i ty
o r
a v a i l ab i l i ty
of
a n i n fo r m a tio n a s se t .
B r e a c h :
A n i n c i de n t
t h a t
r e s u l t s
i n t h e
c o n fir m ed
d i s c l o s u r e— n o t
j u s t po t e n t i a l
e x po s u r e—of
da t a
t o
a n unau t h o r i z ed
pa rty .
s t a n da r d
u s e s
tw o - t o
s i x - d i g i t
c ode s
t o c l a ss i f y
b u sin es s es
a n d
o r ga n i z a t i o n s . O u r
a n a l y s i s
i s
ty p i c a ll y
do n e
a t
t h e tw o - d i g i t
l e v e l .
We
w i ll
s pe c i f y
N A I C S c ode s
a l o n g
w i t h a n i n d u s try
l abe l .
F o r
e x a m p l e ,
a
c h a rt
w i t h a
l abe l
of F i n a n c i a l
( 5 2 )
i s
n o t
i n d i c a t i v e
of
5 2 a s
a
v a l u e .
“ 5 2 ”
i s
t h e
N A I C S
c ode for
the
F i n ance
an d
I n s u r ance
s e c t or . T h e
o v e r a ll
l abe l
of
“ F i n a n c i a l ”
i s u s ed
fo r
b r e v i ty
w i t h i n t h e
fi g u r e s .
De t a i l ed
i n fo r m a t i o n o n t h e
c ode s
a n d c l a ss i fi c a t i o n s y s t e m i s
a v a i l ab l e
h e r e :
h ttp s : // www . ce n s u s . go v / c g i - b i n / ss sd / na i c s / na i c s r c h ? c ha rt = 2 0 1 2
L a s t
y ea r ,
w e
i n tr od u c ed
o u r
n o w ( i n ) fa m o u s
s l a n t ed
ba r
c h a rt s
t o
s h o w t h e
un c e rt a i n ty
d u e
t o
s a m p l i n g
b i a s . 1 O n e
tw eak
w e
added
t h i s
y ea r
w a s
t o r o ll
u p
a n “ O t h e r ”
agg r ega t i o n of
a ll
t h e i t e m s
t h a t
do
n o t
m ake
t h e
c ut o n o u r “ T op
( w h a t e v e r ) ”
c h a rt s .
T h i s
w i ll
g i v e y o u a
be tt e r
s e n s e
of
t h e
t h i n g s
w e
l ef t
o ut .
N o t
t o
be
o ut do n e
t h i s
y ea r ,
o u r i n c r ed i b l e
t ea m of
da t a
s c i e n t i s t s de cide d
t o
try
do t
p l o t s 2
t o
p r o v i de
a be tt e r
w a y
t o
s h o w
h o w
v a l u e s
a r e
d i s tr i b ut ed .
T h e
tr i c k
t o
un de r s t a n d i n g
t h i s
c h a rt
i s t h a t
t h e
do t s
r ep r e s e n t
o r ga n i z a t i o n s . S o
i f
t h e r e
a r e
1 00
do t s
( l i ke
i n ea c h c h a rt
i n F i g u r e
1 ) ,
ea c h do t
r ep r e s e n t s 1 %
of
o r ga n i z a t i o n s .
1 Check “Ne w
chart ,
who
dis ?”
in
the
“ A
couple
o f
tidbits ”
s ection
on
the
inside
co ver
o f
the
2019 DBIR
if
you
need
a
r e fr esher
on
the
slan t ed
bar
charts.
2 T o find
out
mor e
about
do t
plo ts,
check out
Ma t the w
K ay ’ s
paper:
h ttp:/ / www .mjsk ay . com/papers/ chi2018 -uncertain-bus-decisions.pdf
0%
25%
50%
75%
100%
0%
25%
50%
75%
100%
0%
25%
50%
75%
100%
Example
dot
plots
I n F i g u r e
1 ,
w e
h a v e
t h r ee
d i ff e r e n t ch a rt s ,
ea ch
r ep r e s e n t i n g
co mmon d i s tr i b ut i o n s
y o u m a y
fi n d
i n t h i s
r epo rt . F o r
c o n v e n i e n c e ,
w e
h a v e
c o l o r ed
t h e fir s t
h a l f
a n d
t h e
s e c o n d
h a l f
d i ff e r e n t l y s o
i t ’ s
ea s i e r
t o
l o c a t e
t h e
m ed i a n .
I n t h e
fir s t
c h a rt
( H i g h ) ,
y o u s ee
t h a t
a l o t
of
c o m pa n i e s
h ad
a
v e ry
l a r ge
v a l u e 3 a ss o c i a t ed
w i t h t h e m .
T h e
oppo s i t e
i s true
for
the
s e c on d
one
( L o w ) ,
wher e
a
l a r ge
num be r
of
t h e
c o m pa n i e s
h ad z e r o
o r
a
l o w
v a l u e .
O n t h e
t h i r d
c h a rt ( M ed i um ) ,
w e
go t
s tu c k
i n t h e
m i dd l e of
t h e
r oad
a n d
a ll
w e
c a n s a y
i s
t h a t
m o s t
c o m pa n i e s
h a v e
t h a t
m i dd l e
v a l u e . U s i n g
t h e
M ed i um c h a rt ,
w e
c o u l d p r obab l y
r epo rt
a n a v e r age
o r
a
m ed i a n v a l u e .
F o r
t h e
H i g h a n d
L o w
o n e s ,
a n a v e r age
i s
s t a t i s t i c a ll y
un de fi n ed
a n d t h e
m ed i a n w o u l d
be
a
b i t
m i s l ead i n g .
We
w o u l d n ’ t
w a n t
t o
do
y o u l i ke
t h a t .
3 Don ’t
w orry
about
wha t
the
v alue
is
her e .
W e
made
it
up
t o mak e
the
charts
pr e t ty .
And don ’t
w orry
la t er
either ,
we ’ll
us e
a
r eal
v alue
f or
the
r es t
o f
the
do t
plo ts.
The Pic ture
o f
D orian
Gr a y
H e r e
w e
a r e
a t
a n o t h e r
ed i t i o n of
t h e D B I R .
T h i s
i s
a n e x c i t i n g
t i m e
fo r
u s a s
o u r
l i tt l e
b un d l e
of
da t a
tu r n s
1 3 t h i s
y ea r .
T h a t
m ea n s
t h a t
t h e
r epo rt i s
go i n g
t h r o u g h a
l o t
of
b i g
c h a n ge s
r i g h t
n o w ,
j u s t
a s
w e
a ll
d i d
a t
t h a t
age . W h i l e
s o m e ...
推荐访问:2020年数据泄露调查报告 调查报告 泄露 数据
