A quick google search has a lot of articles although I am not sure of their usefulness. I would look to CERT, CSI or maybe the NIPC for some relevant numbers. One link I did find seems to be a collection of links to articles that might be worth checking out. I have never heard of Waveset before and know nothing about them. http://www.waveset.com/Features/inside_threat.html -Kris _____________________________________________ Kris Quinby, CISSP Lead Systems Engineer, Data Center Operations GE Medical Systems, Information Technologies 20540 NW Evergreen Pkwy, Hillsboro, OR 97124 Ph: (503) 531-7190 Fax: (503)531-7001 Email: kris.quinby@private -----Original Message----- From: Daggett, Steve [mailto:Steve.Daggett@private] Sent: Tuesday, August 19, 2003 10:26 AM To: Crime (E-mail) Subject: CRIME 80/20 Rule There's an often quoted statistic that 20% of network intrusions come from the outside and 80% intrusions are inside jobs. I've heard it, I've read it, I've even said it... Does anyone know were the statistic comes from? I've been looking around the web and can't seem to find an authoritative source for the statistic. Steve Daggett Senior Network Design Engineer Fiserv EFT This e-mail is confidential and may well be legally privileged. If you have received it in error, you are on notice of its status. Please notify us immediately by reply e-mail and then delete this message from your system. Please do not copy it or use it for any purposes, or disclose its contents to any other person. To do so could violate state and Federal privacy laws. Thank you for your cooperation. Please contact me if you need assistance.
This archive was generated by hypermail 2b30 : Tue Aug 19 2003 - 17:44:16 PDT