---

Ministry of Defence

Answer

Mr. Burstow: To ask the Secretary of State for Defence, pursuant to his answer of 14 February 2000, Official Report, column 372W, on computers (1) if he will list the eight different categories of misuse by which internal hacking incidents are categorised; and the number of hacking incidents by category for each of the last five years; [111112] (2) what information is held on his Department's incident recording system about each internal hacking incident over the last five years. [111110] Mr. Spellar: [holding answer 22 February 2000]: My Department is a contributing Department to the Government wide Unified Incident Reporting and Alert Scheme (UNIRAS). Internal hacking incidents are categorised into the following eight types of misuse: access denied; browsing; password abuse; privilege abuse; data stolen/disclosed; files deleted/damaged; fraud; other. The number of internal hacking incidents, by category, for each of the last five years is: _________________________________________________________________________________________________. 1994-95 1995-96 1996-97 1997-98 1998-99 Access denied 0 1 0 3 1 Browsing 0 1 0 0 0 Password abuse 0 0 0 1 0 Privilege abuse 0 5 2 1 1 Data stolen/disclosed 0 2 0 0 1 Files deleted/damaged 1 2 2 1 0 Fraud 0 0 0 0 0 Other 0 0 0 0 0 _________________________________________________________________________________________________. The following information is recorded against each hacking incident: installation/system, main use of the system, date, intent/success, effect of incident, assets compromised, additional free text on why, how and actions taken.

Secondary information

Type

Written question

Reference

345 c270W; 111112;111110

Session

1999-00

Subjects

Disclosure of information Crime Computers Ministry of Defence Hacking

Contains statistics

Yes