CERT Report January 2024

CERT Report January 2024

01. Monthly Attack Trends Through Statistics 

 

Attack Type Statistics

 

In the attack type statistics, you can access statistical information on the top nine attack types that occurred in the previous month, including the progression of each attack in terms of increase and decrease, as well as the attack progression by industry sector and by country.

 

Monthly Attack Type Statistics

 

According to the attack type statistics compiled for December, the overall detection count reached 357,359 cases, representing an increase of 32,691 compared to the previous month. The most frequently attempted Collect and Analyze Information attacks totaled 146,181 cases, showing a decrease of 1,196 cases compared to the previous month, accounting for 40.9% of the overall ratio of attack types in December. The Inject Unexpected Items attacks ranked 2nd with 131,456 cases, the Manipulate Data Structures attacks ranked 3rd with 43,214 cases, the Subvert Access Control attacks ranked 4th with 29,573 cases, the Manipulate System Resources attacks ranked 5th with 3,496 cases, the Abuse Existing Functionality attacks ranked 6th with 2,374 cases, the Employ Probabilistic Techniques attacks ranked 7th with 1,061 cases, the Engage in Deceptive Interactions attacks ranked 8th with 4 cases, and the Manipulate Timing State attacks ranked 9th with 0 cases, all maintaining the same rankings as the previous month.

 

 


Figure 1. December attack types ratio 

 

 

 


Figure 2. Percentage of attack types in the past 12 months 

 

Rank Attack Type Fluctuation November December

12 Months

Percentage

Count Ratio Count Ratio
1 Collect and Analyze Information 147,377 45.4% 146,181 40.9% 53.0%
2 Inject Unexpected Items 114,088 35.1% 131,456 36.8% 28.5%
3 Manipulate Data Structures 32,665 10.1% 43,214 12.1% 6.7%
4 Subvert Access Control 23,937 7.4% 29,573 8.3% 6.6%
5 Manipulate System Resources 3,121 1.0% 3,496 1.0% 0.8%
6 Abuse Existing Functionality 2,433 0.7% 2,374 0.7% 1.7%
7 Employ Probabilistic Techniques 1,041 0.3% 1,061 0.3% 0.5%
8 Engage in Deceptive Interactions 6 0.0% 4 0.0% 0.0%
9 Manipulate Timing State 0 0.0% 0 0.0% 0.0%
Total 324,668 100% 357,359 100% 100%

Table 1. Attack type statistics in December

※ Categorized analytical events into nine attack types based on attack patterns

※ Total ratio is calculated by rounding

 

The progression of attack types over the past three months is as follows.


Figure 3. Progression of attack types in the past 3 months

 

IP

103[.]180[.]148[.]161
120[.]79[.]244[.]82
146[.]190[.]47[.]101
149[.]50[.]96[.]45
150[.]109[.]83[.]206