beryllium / gibson-index Goto Github PK

Clear ranking criteria are needed to make the Index fair in the way events and attacks are categorized. Right now, the ratings on www.gibsonindex.org are almost entirely subjective, based on the "examples" currently outlined in the overview (README.md).

It needs to be immediately clear when an attack has escalated to a Level Four or Level Five. Currently only one attack has been ranked (subjectively) as a Level Four attack, and that was a cyberheist in which $900K was stolen and where the attack was disguised by a DDoS. Clear malicious intent, clear damages.

It also needs to be immediately clear when an event is only worthy of a Level Zero or Level One rating - this might be a challenge, because sometimes the mitigating factors of the "victim" might cause an event to be downgraded from what might otherwise be a Level Two or higher attack. It's hard to guess what those factors might be ahead of time, so a lot of thought will be required to nail down a reusable definition.

May i ask is that any target time frame for resolve each of the level in Gibson index?