Trends in the occurrence of ICT incidents in terms of cybersecurity

Abstract

Quick and unhindered access to information is a feature of social and economic development, and the functioning of the entire state depends on the efficiency and stability of ICT systems. A breakdown in digital security brings with it the risk of citizens’ safety being compromised, the interception of sensitive data, including personal data, invasion of privacy, loss of money and often health. Effective countermeasures require the continuous establishment and development of a cybersecurity system. The purpose of this article is to analyze and assess the scale and type of emerging incidents. It was assumed (research hypothesis) in ICT systems, including those related to the critical infrastructure of the state, there is an increasing number of incidents involving malicious software and events involving illegal collection of information. The study was based on data on incidents coordinated by the GOV CSIRT (Governmental Computer Security Incident Response Team). The information was obtained from the reports of the CSIRT GOV team for the years 2010-2022. The number of reports and actual incidents was analysed on a quarterly and annual basis, as well as their classification in various categories, using primarily the method of scientific observation, document examination, mathematical analysis and inference. Groups of threats were identified that are characterised by a clear increase in the number of incidents in recent years and against which an intensification of preventive measures is required. The results of the study are in line with the trend observed worldwide. The study clearly shows that malware incidents or information-gathering incidents are becoming more frequent in the virtual world.