Where do you get statistics and probabilities on threats? It seems organizations always ask for hard facts on threat statistics, but the research doesn’t appear to be very mature. Creating a good threat library and making a best guest effort seems to be common practice among others in the security industry. There are a few good sources for this information that exist such as:
- CERTs Ecrime Surveys
- The National Counter Terrorism Center
- Workshare Reports
And then you have all kinds of different sites that can help you build a threat library but are lacking statistics such as:
- Georgia Institute of Technology
Some of these sources were used to start the ISM’s list, but my involvement has slipped, however time and time again there is a need for this information. If anyone has other good resources let me know and I will add them to the links page and see about getting some of this information into the ISM community threat library.