State of the Practice of Computer Security Incident Response Teams ...

60
50
40
30
Commercial / North America
Commercial / Europe
Reseach / North America
Reseach / Europe
20
10
0
1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003
Figure 8: Differentiation of Trends in North America and Europe
Figure 8 shows the following trends: 55
• The growth rate of research-oriented teams in Europe is decreasing. This is because many
of the research networks and large universities already have their own teams and the
smaller universities do not seem to have the need to create such a team. The growth that
did occur was due to the remaining larger universities establishing teams when they realized
the need.
• The growth rate of commercial teams in Europe has begun to exceed that of research
teams in Europe, while the number of research teams and commercial teams has steadily
increased in North America. The number of commercial teams in North America is still
four times that of the number of research teams.
• It appears from the data available for registered teams that the increase in the number of
teams in North America is primarily due to the growth of commercial teams, while the
increase in the number of teams in Europe was initially due to the establishment of research
network teams and is now primarily due to the growth of commercial teams.
55
Keep in mind that the numbers for North America are based on the registered teams and that the
real numbers might be higher by 40 to 50 percent. Since we assume that the increase would be
equally proportional for each category and subcategory, our further conclusion seems to be in
keeping with these trends, but should be taken with some caution.
CMU/SEI-2003-TR-001 45