CERT Coordination Center 1994 Annual Report

From January through December 1994, the CERT Coordination Center received 29,580 e-mail messages and 3,664 hotline calls reporting computer security incidents or requesting information.

The CERT staff handled 2,241 computer security incidents during this period. The following chart provides a by-month break-out of this activity. There have been over 40,241 sites affected by these incidents. (22,650 of these sites were involved in a failed sendmail attack, where all computers within a specified IP address range were probed to exploit an old sendmail vulnerability.) Based on current computer security incident data, the following are the top four techniques for exploiting Internet hosts:

• Sniffer attacks: reusable passwords, Trojan utilities
• Email related: 3 different sendmail attacks
• Network File System (NFS) attacks
• Network Information Services (NIS) attacks