CERT Report June 2024
01. Monthly Attack Trends Through Statistics
Attack Type Statistics
Attack type statistics lets you access statistical information on the Top 9 attack types that occurred in the previous month, including the progression of each attack in terms of increase and decrease, as well as attack progression by industry sector and country.
Monthly Attack Type Statistics
According to the attack type statistics compiled for May, the total number of detections increased by 132,034 cases compared to the previous month, totaling 610,765 cases. The most frequently attempted Inject Unexpected Items attacks numbered 316,128, showing an 85,493 increase from the previous month and accounting for 51.8% of the overall attack type distribution for May. Collect and Analyze Information attacks ranked 2nd with 194,817 cases, Manipulate System Resources attacks ranked 5th with 10,064 cases, Engage in Deceptive Interactions attacks ranked 8th with 21 cases, and Manipulate Timing State attacks tied for 9th with other attacks with 0 cases, all maintaining the same rankings as the previous month. Manipulate Data Structures attacks saw a 1-rank increase to 3rd place with 45,766 cases and Employ Probabilistic Techniques attacks saw a 1-rank increase to 6th place with 2,945 cases. On the other hand, Subvert Access Control attacks decreased by 1 rank to 4th place with 39,748 cases and Abuse Existing Functionality attacks decreased by 1 rank to 7th place with 1,276 cases.
Figure 1. Attack Type Ratio in May
Figure 2. Percentage of attack types in the past 12 months
| Rank | Attack Type | Fluctuation | April | May |
12 Months Percentage |
||
| Count | Ratio | Count | Ratio | ||||
| 1 | Inject Unexpected Items | – | 230,635 | 48.2% | 316,128 | 51.8% | 36.2% |
| 2 | Collect and Analyze Information | – | 171,123 | 35.7% | 194,817 | 31.9% | 46.0% |
| 3 | Manipulate Data Structures | ▲1 | 30,286 | 6.3% | 45,766 | 7.5% | 7.8% |
| 4 | Subvert Access Control | ▼1 | 37,206 | 7.8% | 39,748 | 6.5% | 7.4% |
| 5 | Manipulate System Resources | – | 6,907 | 1.4% | 10,064 | 1.6% | 1.1% |
| 6 | Employ Probabilistic Techniques | ▲1 | 1,232 | 0.3% | 2,945 | 0.5% | 0.3% |
| 7 | Abuse Existing Functionality | ▼1 | 1,321 | 0.3% | 1,276 | 0.2% | 1.2% |
| 8 | Engage in Deceptive Interactions | – | 21 | 0.0% | 21 | 0.0% | 0.0% |
| 9 | Manipulate Timing State | – | 0 | 0.0% | 0 | 0.0% | 0.0% |
| Total | 478,731 | 100% | 610,765 | 100% | 100% | ||
Table 1. Attack type statistics in May
※ Analytical events are categorized into 9 attack types based on attack patterns
※ Total ratio is calculated by rounding
The progression of attack types over the past 3 months is as follows.
Figure 3. Trend of attack types in the last 3 months
