Skip to content
Permalink
main
Switch branches/tags

web-hack-mirror/mirror/stats.html.BAK

Go to file
 
 
Cannot retrieve contributors at this time
332 lines (283 sloc) 8.79 KB
Raw Blame
Open in GitHub Desktop
<HTML>
<HEAD>
<TITLE>
Attrition Defacement Statistics
</TITLE>
</HEAD>
<BODY BGCOLOR="#000000" TEXT="#FFFFFF" LINK="#FF0000" VLINK="#C0C0C0" ALINK="#FF0000">
<H1>
Attrition Defacement Statistics
</H1>
<HR NOSHADE>
<P>
Please read the <A HREF="#NOTES">NOTES</A>.
<P>
Links to individual <A HREF="#GRAPHS">graphs</A>.
<P>
Other <A HREF="#OTHER">Resources</A>
<P>
<A HREF="#STAT">Statistic</A> of the Month.
<P>
<A HREF="#DERBY">Subpoena</A> Derby.
<HR NOSHADE>
<P>
Trends in Defacements by Webserver, August, 1999 - August, 2000:<BR>
<A HREF="webserver-graphs.html">Webserver Graphs</A>
<P>
Total Defacement Trends, January 1999 - August, 2000:<BR>
<A HREF="defacements-graphs.html">Total Defacement Graphs</A>
<P>
Trends in Defacements by Operating System, August, 1999 - August, 2000:<BR>
<A HREF="os-graphs.html">Operating System Graphs</A>
<P>
Defacements counts by year, month, and since August 1999, Operating System:<BR>
<A HREF="os.html">Operating System Tables</A>
<P>
Defacements categorized by Country and TLD (Top Level Domain), including Banks,
Churches, Police Stations (Over 70 Linked pages by Domain):<BR>
<A HREF="country.html">Country and TLD breakdown</A>
<P>
Special, 1999 only run for Countries, TLD's and OS:<BR>
<A HREF="/~munge/country1999.html">1999 Country and TLD Breakdown</A>
<A NAME="GRAPHS"></A>
<P>
Graph Table of Contents:
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/bar_ostotals.gif">
OS totals by month, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/pct_bsd_29mav.gif">
*BSD Moving Average, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/pct_linux_29mav.gif">
Linux Moving Average, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/pct_solaris_29mav.gif">
Solaris Moving Average, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/pct_nt_29mav.gif">
NT Moving Average, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/pct_all_small_29mav.gif">
Moving Average, All OS's Together, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/cumulative.gif">
Daily Cumulative Totals, All OS's Together, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/pie_overall.gif">
Pie Chart of Overall OS Share, August 1999 to Present
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/total_annual_cum.gif">
1999 vs. 2000 Daily Cumulative Totals Comparison
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/scatter_dpd.gif">
1999 to Present Scatter Plot of Defacements per Day with Fitted Line
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/spike_dpd.gif">
1999 to Present Spike Plot of Defacements per Day with Average per Day.
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/bar_dpm.gif">
1999 to Present Montly Totals
</A>
<P>
<A HREF="http://www.attrition.org/mirror/attrition/graphs/hist_bin5.gif">
1999 to Present Histogram of Defacements per Day
</A>
<!-- Insert stat o'month -->
<A NAME="STAT"></A>
<HR NOSHADE>
<P>
<H3>
Statistic of the Month
</H3>
<CENTER>
<H4>
Most Active Groups:
</H4>
<TABLE WIDTH="60%">
<TH>RANK</TH>
<TH>Group</TH>
<TH>Defacements</TH>
<TH>Days Active</TH>
<TH>Latest Defacement</TH>
<TR>
<TD>1.</TD>
<TD>forpaxe</TD>
<TD ALIGN="RIGHT">156</TD>
<TD ALIGN="RIGHT">466</TD>
<TD ALIGN="RIGHT">01aug00</TD>
</TR>
<TR>
<TD>2.</TD>
<TD>antichrist</TD>
<TD ALIGN="RIGHT">142</TD>
<TD ALIGN="RIGHT">163</TD>
<TD ALIGN="RIGHT">10dec99</TD>
</TR>
<TR>
<TD>3.</TD>
<TD>dhc</TD>
<TD ALIGN="RIGHT">116</TD>
<TD ALIGN="RIGHT">310</TD>
<TD ALIGN="RIGHT">08aug00</TD>
</TR>
<TR>
<TD>4.</TD>
<TD>gh</TD>
<TD ALIGN="RIGHT">115</TD>
<TD ALIGN="RIGHT">268</TD>
<TD ALIGN="RIGHT">07aug99</TD>
</TR>
<TR>
<TD>5.</TD>
<TD>gforcepakistan</TD>
<TD ALIGN="RIGHT">110</TD>
<TD ALIGN="RIGHT">175</TD>
<TD ALIGN="RIGHT">16aug00</TD>
</TR>
<TR>
<TD>6.</TD>
<TD>crimeboys</TD>
<TD ALIGN="RIGHT">102</TD>
<TD ALIGN="RIGHT">166</TD>
<TD ALIGN="RIGHT">10jul00</TD>
</TR>
<TR>
<TD>7.</TD>
<TD>mcm4nus</TD>
<TD ALIGN="RIGHT">100</TD>
<TD ALIGN="RIGHT">138</TD>
<TD ALIGN="RIGHT">07aug00</TD>
</TR>
<TR>
<TD>8.</TD>
<TD>pakistanhc</TD>
<TD ALIGN="RIGHT">99</TD>
<TD ALIGN="RIGHT">272</TD>
<TD ALIGN="RIGHT">01apr00</TD>
</TR>
<TR>
<TD>9.</TD>
<TD>acidklown</TD>
<TD ALIGN="RIGHT">94</TD>
<TD ALIGN="RIGHT">273</TD>
<TD ALIGN="RIGHT">04jun00</TD>
</TR>
<TR>
<TD>10.</TD>
<TD>ph33rtheb33r</TD>
<TD ALIGN="RIGHT">76</TD>
<TD ALIGN="RIGHT">275</TD>
<TD ALIGN="RIGHT">08aug00</TD>
</TR>
</TABLE>
<P>
<FONT SIZE="2">
(Note: 1995 to August 18, 2000; entire archive)
</FONT>
</CENTER>
<P>
If you have an idea for a statistic you'd like to see from the mirror, feel free
to email me your suggestions:
<A HREF="mailto:munge@attrition.org">munge@attrition.org</A>
<A NAME="DERBY"></A>
<P>
<B>Subpoena Stats</B><BR>
One 2703d Subpoena has been delivered under seal. It requested information
on two individuals. Apparently the FBI thought it easier than delivering
two seperate subpoenas. The previously listed "pending" subpoena was never
delivered.
<HR NOSHADE>
<A NAME="NOTES"></A>
<P>
Notes:
<P>
It goes without saying that Attrition does not get every defacement that
is reported to us, that not all defacements are reported to us, and that
these statistics refer only to our archive.
<P>
All of the tallies, graphs, tables, and etc., count each
<A HREF="http://www.attrition.org/mirror/attrition/notes.html#mass">
"Mass Hack"</A> as one defacement unless otherwise stated.
<P>
These statistics are prepared with a combination of Perl and a commercial
statistics package, <A HREF="http://www.stata.com">Stata</A>. All graphics
are from Stata.
<P>
Discrepancies: Yes. The <A HREF="os.html">easiest</A> discrepancy to find is
between total defacements and adding up the totals for each month. On one
hand, a total and accurate count of the entire archive is desired, on the other,
when we do date-based calculations or tallies, we kick out incomplete dates.
Since we have a number of mirrors that don't have a complete date, the date-based
calculations and the total count differ. Most of the incomplete dates are from
or before early 1999.
<P>
Comments on the graphs:<BR>
We have gradually included more graphs, and more recently (July 2000) some of
<A HREF="graphs/bar_ostotals.gif">these</A> have been specifially designed to
clarify some of the previous graphs. In some of the claims being made about
these graphs, the moving average of percent of Operating System share
<A HREF="graphs/pct_all_small_29mav.gif">graphs</A> have been misunderstood
to mean everything from reflecting trends in total defacements to Attrition's
advocacy of certain Operating Systems for security purposes. As an antidote,
consider the recent statistics for *BSD: A glance at the moving average graph
for the <A HREF="os-graphs.html#BSD">June 2000</A> period might lead one to
believe that the <B>total</B> defacements for *BSD has increased over the period
of June. But such is not the case, as a glance at the monthly
<A HREF="graphs/bar_ostotals.gif">totals</A> graphs and the Operating System
monthly <A HREF="os.html">tables</A> demonstrates: *BSD defacements actually
fell between May and June from 37 to 24. That said, *BSD's relative share
did increase due to larger relative decreases in other Operating System shares,
which is reflected in the moving average graph. All said, the moving average
graphs are very useful so long as we understand what they actually reflect.
<A NAME="OTHER"></A>
<P>
Other Resources: <BR>
<P>
The Bugtraq Vulnerability Database Statistics <BR>
<A HREF="http://www.securityfocus.com/vdb/stats.html">
http://www.securityfocus.com/vdb/stats.html
</A>
<P>
The Netcraft Web Server Survey <BR>
<A HREF="http://www.netcraft.com/survey/">
http://www.netcraft.com/survey/
</A>
<P>
The E-Soft Web Server Survey <BR>
<A HREF="http://www.securityspace.com/s_survey/data/">
http://www.securityspace.com/s_survey/data/
</A>
<P>
<!--===== Break =====-->
<HR>
Something look wrong? Suggestions? Inquiries?
<ADDRESS><A HREF="mailto:munge@attrition.org">munge@attrition.org</A></ADDRESS>
<BR>
<FONT SIZE="2">
&#169; 1999, 2000 Copyright Brian Martin<BR>
Excerpts from this page may be reproduced if <A HREF="http://www.attrition.org">
Attrition</A> and the URL<BR>
http://www.attrition.org/mirror/attrition/stats.html are attributed.
<!-- Created: Sun Jan 30 14:20:55 CST 2000 -->
<P>
<!-- hhmts start -->
Last modified: Fri Aug 18 12:34:48 CDT 2000
<!-- hhmts end -->
<!-- (C) HTML and content. Copyright 1999, 2000 Brian Martin -->
<munge></munge>
</FONT>
<!--===== End =====-->
</BODY>
</HTML>